{"id":2217,"date":"2025-12-23T22:28:31","date_gmt":"2025-12-23T14:28:31","guid":{"rendered":"https:\/\/zaf.web.id\/blog\/?p=2217"},"modified":"2026-11-01T22:43:39","modified_gmt":"2026-11-01T14:43:39","slug":"bahaya-memasang-mcp-server-ai-agent-di-server-produksi","status":"publish","type":"post","link":"https:\/\/zaf.web.id\/blog\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\/","title":{"rendered":"Bahaya Memasang MCP Server \/ AI Agent di Server Produksi"},"content":{"rendered":"<p>AI kini tidak lagi sekadar menjawab pertanyaan. Lewat Model Context Protocol (MCP), sebuah AI agent bisa membaca database, menjalankan perintah, bahkan melakukan deploy. Sebagai orang yang sehari-hari mengurus server, saya melihat MCP sebagai pintu baru yang harus diperlakukan sama seriusnya dengan port SSH.<\/p>\n<h2>Seberapa besar risikonya?<\/h2>\n<p>Sejumlah riset keamanan di 2026 menunjukkan gambaran yang kurang menenangkan. Salah satu survei menemukan sekitar seperempat server MCP berjalan tanpa autentikasi sama sekali, dan pengujian terpisah mendapati banyak server MCP rentan terhadap command injection. Risiko utamanya meliputi tool poisoning, izin yang terlalu luas, dan server MCP liar yang tidak tercatat.<\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-2219\" src=\"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/11\/AaGXiFq88uTassqEZ0GuuQ-AaGXiFq8HN2yN4O6HXyvjw.png?resize=1680%2C944&#038;ssl=1\" alt=\"Diagram alur AI agent, MCP server, dan sistem produksi\" width=\"1680\" height=\"944\" srcset=\"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/11\/AaGXiFq88uTassqEZ0GuuQ-AaGXiFq8HN2yN4O6HXyvjw.png?w=1680&amp;ssl=1 1680w, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/11\/AaGXiFq88uTassqEZ0GuuQ-AaGXiFq8HN2yN4O6HXyvjw.png?resize=300%2C169&amp;ssl=1 300w, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/11\/AaGXiFq88uTassqEZ0GuuQ-AaGXiFq8HN2yN4O6HXyvjw.png?resize=1024%2C575&amp;ssl=1 1024w, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/11\/AaGXiFq88uTassqEZ0GuuQ-AaGXiFq8HN2yN4O6HXyvjw.png?resize=768%2C432&amp;ssl=1 768w, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/11\/AaGXiFq88uTassqEZ0GuuQ-AaGXiFq8HN2yN4O6HXyvjw.png?resize=1536%2C863&amp;ssl=1 1536w\" sizes=\"auto, (max-width: 1000px) 100vw, 1000px\" \/><\/p>\n<p>&nbsp;<\/p>\n<h2>Checklist sebelum menghubungkan agent ke server<\/h2>\n<ul>\n<li>Least privilege: jalankan MCP server dengan user khusus non-root, hanya dengan akses ke direktori yang benar-benar dibutuhkan.<\/li>\n<li>Read-only sebagai default: mulai dari tool yang hanya membaca. Tool yang menulis, menghapus, atau menjalankan shell ditambahkan belakangan dan dengan alasan jelas.<\/li>\n<li>Wajib autentikasi: jangan pernah membuka MCP server ke jaringan publik tanpa auth. Bind ke localhost bila memungkinkan.<\/li>\n<li>Persetujuan manusia: aksi destruktif (hapus data, restart layanan, deploy) harus melalui konfirmasi.<\/li>\n<li>Catat setiap pemanggilan tool: log siapa, kapan, tool apa, dan parameter apa.<\/li>\n<li>Audit sumber: perlakukan paket MCP server pihak ketiga seperti plugin WordPress, yaitu cek pengelola, aktivitas, dan isi kodenya.<\/li>\n<\/ul>\n<h2>Isolasi dengan container<\/h2>\n<p>Contoh menjalankan MCP server dalam container yang sangat dibatasi: tanpa jaringan, filesystem read-only, tanpa capability tambahan, dan hanya melihat satu folder data.<\/p>\n<p><code>docker run --rm -i \\<br \/>\n--read-only --cap-drop=ALL --network=none \\<br \/>\n--user 1000:1000 \\<br \/>\n-v \/srv\/data\/laporan:\/data:ro \\<br \/>\nnama-image-mcp-server<\/code><\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-2220\" src=\"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/11\/AaGXit2lXc5cZeEH1Yx6SA-AaGXit2lGQkYFMY2oy6Pxg.png?resize=1680%2C944&#038;ssl=1\" alt=\"Contoh log audit pemanggilan tool MCP\" width=\"1680\" height=\"944\" srcset=\"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/11\/AaGXit2lXc5cZeEH1Yx6SA-AaGXit2lGQkYFMY2oy6Pxg.png?w=1680&amp;ssl=1 1680w, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/11\/AaGXit2lXc5cZeEH1Yx6SA-AaGXit2lGQkYFMY2oy6Pxg.png?resize=300%2C169&amp;ssl=1 300w, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/11\/AaGXit2lXc5cZeEH1Yx6SA-AaGXit2lGQkYFMY2oy6Pxg.png?resize=1024%2C575&amp;ssl=1 1024w, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/11\/AaGXit2lXc5cZeEH1Yx6SA-AaGXit2lGQkYFMY2oy6Pxg.png?resize=768%2C432&amp;ssl=1 768w, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/11\/AaGXit2lXc5cZeEH1Yx6SA-AaGXit2lGQkYFMY2oy6Pxg.png?resize=1536%2C863&amp;ssl=1 1536w\" sizes=\"auto, (max-width: 1000px) 100vw, 1000px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/zaf.web.id\/blog\/tips-keamanan-siber-ai-assisted\/\">AI agent memang bisa menghemat banyak waktu.<\/a> Tetapi seperti malware yang menyebar lewat plugin tepercaya, masalah terbesar biasanya datang dari akses yang kita berikan sendiri tanpa batas yang jelas.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>AI kini tidak lagi sekadar menjawab pertanyaan. Lewat Model Context Protocol (MCP), sebuah AI agent&hellip;<\/p>\n","protected":false},"author":1,"featured_media":2218,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[272,58],"tags":[341,343,345,344,342],"class_list":["post-2217","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","category-server","tag-ai-agent","tag-devops","tag-docker","tag-least-privilege","tag-mcp"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Bahaya Memasang MCP Server \/ AI Agent di Server Produksi - Ahmad Zafrullah<\/title>\n<meta name=\"description\" content=\"MCP membuat AI agent bisa bertindak langsung di server. Kenali risikonya dan checklist sysadmin sebelum menghubungkan agent ke sistem produksi.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/zaf.web.id\/blog\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\/\" \/>\n<meta property=\"og:locale\" content=\"id_ID\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Bahaya Memasang MCP Server \/ AI Agent di Server Produksi - Ahmad Zafrullah\" \/>\n<meta property=\"og:description\" content=\"MCP membuat AI agent bisa bertindak langsung di server. Kenali risikonya dan checklist sysadmin sebelum menghubungkan agent ke sistem produksi.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/zaf.web.id\/blog\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\/\" \/>\n<meta property=\"og:site_name\" content=\"Ahmad Zafrullah\" \/>\n<meta property=\"article:publisher\" content=\"http:\/\/www.facebook.com\/23Pstars\" \/>\n<meta property=\"article:author\" content=\"http:\/\/www.facebook.com\/23Pstars\" \/>\n<meta property=\"article:published_time\" content=\"2025-12-23T14:28:31+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-11-01T14:43:39+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/11\/AaGXhdf1A_mdSucUX8JpFQ-AaGXhdf1m2KMAawBBA-Ljw.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1680\" \/>\n\t<meta property=\"og:image:height\" content=\"944\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Zaf\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@23Pstars\" \/>\n<meta name=\"twitter:site\" content=\"@23Pstars\" \/>\n<meta name=\"twitter:label1\" content=\"Ditulis oleh\" \/>\n\t<meta name=\"twitter:data1\" content=\"Zaf\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimasi waktu membaca\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 menit\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\\\/\"},\"author\":{\"name\":\"Zaf\",\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/#\\\/schema\\\/person\\\/ba4e955d59a1e6a8284857e74b14e5ed\"},\"headline\":\"Bahaya Memasang MCP Server \\\/ AI Agent di Server Produksi\",\"datePublished\":\"2025-12-23T14:28:31+00:00\",\"dateModified\":\"2026-11-01T14:43:39+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\\\/\"},\"wordCount\":264,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/#\\\/schema\\\/person\\\/ba4e955d59a1e6a8284857e74b14e5ed\"},\"image\":{\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/zaf.web.id\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/AaGXhdf1A_mdSucUX8JpFQ-AaGXhdf1m2KMAawBBA-Ljw.png?fit=1680%2C944&ssl=1\",\"keywords\":[\"ai agent\",\"devops\",\"docker\",\"least privilege\",\"mcp\"],\"articleSection\":[\"Security\",\"Server\"],\"inLanguage\":\"id\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/zaf.web.id\\\/blog\\\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\\\/\",\"url\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\\\/\",\"name\":\"Bahaya Memasang MCP Server \\\/ AI Agent di Server Produksi - Ahmad Zafrullah\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/zaf.web.id\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/AaGXhdf1A_mdSucUX8JpFQ-AaGXhdf1m2KMAawBBA-Ljw.png?fit=1680%2C944&ssl=1\",\"datePublished\":\"2025-12-23T14:28:31+00:00\",\"dateModified\":\"2026-11-01T14:43:39+00:00\",\"description\":\"MCP membuat AI agent bisa bertindak langsung di server. Kenali risikonya dan checklist sysadmin sebelum menghubungkan agent ke sistem produksi.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\\\/#breadcrumb\"},\"inLanguage\":\"id\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/zaf.web.id\\\/blog\\\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"id\",\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\\\/#primaryimage\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/zaf.web.id\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/AaGXhdf1A_mdSucUX8JpFQ-AaGXhdf1m2KMAawBBA-Ljw.png?fit=1680%2C944&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/zaf.web.id\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/AaGXhdf1A_mdSucUX8JpFQ-AaGXhdf1m2KMAawBBA-Ljw.png?fit=1680%2C944&ssl=1\",\"width\":1680,\"height\":944,\"caption\":\"Ilustrasi AI agent memegang akses ke server produksi\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Bahaya Memasang MCP Server \\\/ AI Agent di Server Produksi\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/\",\"name\":\"Ahmad Zafrullah\",\"description\":\"Work to Learn is better than Learn how to Work\",\"publisher\":{\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/#\\\/schema\\\/person\\\/ba4e955d59a1e6a8284857e74b14e5ed\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"id\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/#\\\/schema\\\/person\\\/ba4e955d59a1e6a8284857e74b14e5ed\",\"name\":\"Zaf\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"id\",\"@id\":\"https:\\\/\\\/i0.wp.com\\\/zaf.web.id\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/09\\\/zaf_auto_x2.jpeg?fit=300%2C300&ssl=1\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/zaf.web.id\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/09\\\/zaf_auto_x2.jpeg?fit=300%2C300&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/zaf.web.id\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/09\\\/zaf_auto_x2.jpeg?fit=300%2C300&ssl=1\",\"width\":300,\"height\":300,\"caption\":\"Zaf\"},\"logo\":{\"@id\":\"https:\\\/\\\/i0.wp.com\\\/zaf.web.id\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/09\\\/zaf_auto_x2.jpeg?fit=300%2C300&ssl=1\"},\"sameAs\":[\"http:\\\/\\\/zaf.web.id\",\"http:\\\/\\\/www.facebook.com\\\/23Pstars\",\"https:\\\/\\\/x.com\\\/23Pstars\"],\"url\":\"https:\\\/\\\/zaf.web.id\\\/blog\\\/author\\\/zaf\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Bahaya Memasang MCP Server \/ AI Agent di Server Produksi - Ahmad Zafrullah","description":"MCP membuat AI agent bisa bertindak langsung di server. Kenali risikonya dan checklist sysadmin sebelum menghubungkan agent ke sistem produksi.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/zaf.web.id\/blog\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\/","og_locale":"id_ID","og_type":"article","og_title":"Bahaya Memasang MCP Server \/ AI Agent di Server Produksi - Ahmad Zafrullah","og_description":"MCP membuat AI agent bisa bertindak langsung di server. Kenali risikonya dan checklist sysadmin sebelum menghubungkan agent ke sistem produksi.","og_url":"https:\/\/zaf.web.id\/blog\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\/","og_site_name":"Ahmad Zafrullah","article_publisher":"http:\/\/www.facebook.com\/23Pstars","article_author":"http:\/\/www.facebook.com\/23Pstars","article_published_time":"2025-12-23T14:28:31+00:00","article_modified_time":"2026-11-01T14:43:39+00:00","og_image":[{"width":1680,"height":944,"url":"https:\/\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/11\/AaGXhdf1A_mdSucUX8JpFQ-AaGXhdf1m2KMAawBBA-Ljw.png","type":"image\/png"}],"author":"Zaf","twitter_card":"summary_large_image","twitter_creator":"@23Pstars","twitter_site":"@23Pstars","twitter_misc":{"Ditulis oleh":"Zaf","Estimasi waktu membaca":"2 menit"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/zaf.web.id\/blog\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\/#article","isPartOf":{"@id":"https:\/\/zaf.web.id\/blog\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\/"},"author":{"name":"Zaf","@id":"https:\/\/zaf.web.id\/blog\/#\/schema\/person\/ba4e955d59a1e6a8284857e74b14e5ed"},"headline":"Bahaya Memasang MCP Server \/ AI Agent di Server Produksi","datePublished":"2025-12-23T14:28:31+00:00","dateModified":"2026-11-01T14:43:39+00:00","mainEntityOfPage":{"@id":"https:\/\/zaf.web.id\/blog\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\/"},"wordCount":264,"commentCount":0,"publisher":{"@id":"https:\/\/zaf.web.id\/blog\/#\/schema\/person\/ba4e955d59a1e6a8284857e74b14e5ed"},"image":{"@id":"https:\/\/zaf.web.id\/blog\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/11\/AaGXhdf1A_mdSucUX8JpFQ-AaGXhdf1m2KMAawBBA-Ljw.png?fit=1680%2C944&ssl=1","keywords":["ai agent","devops","docker","least privilege","mcp"],"articleSection":["Security","Server"],"inLanguage":"id","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/zaf.web.id\/blog\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/zaf.web.id\/blog\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\/","url":"https:\/\/zaf.web.id\/blog\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\/","name":"Bahaya Memasang MCP Server \/ AI Agent di Server Produksi - Ahmad Zafrullah","isPartOf":{"@id":"https:\/\/zaf.web.id\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/zaf.web.id\/blog\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\/#primaryimage"},"image":{"@id":"https:\/\/zaf.web.id\/blog\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/11\/AaGXhdf1A_mdSucUX8JpFQ-AaGXhdf1m2KMAawBBA-Ljw.png?fit=1680%2C944&ssl=1","datePublished":"2025-12-23T14:28:31+00:00","dateModified":"2026-11-01T14:43:39+00:00","description":"MCP membuat AI agent bisa bertindak langsung di server. Kenali risikonya dan checklist sysadmin sebelum menghubungkan agent ke sistem produksi.","breadcrumb":{"@id":"https:\/\/zaf.web.id\/blog\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\/#breadcrumb"},"inLanguage":"id","potentialAction":[{"@type":"ReadAction","target":["https:\/\/zaf.web.id\/blog\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\/"]}]},{"@type":"ImageObject","inLanguage":"id","@id":"https:\/\/zaf.web.id\/blog\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\/#primaryimage","url":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/11\/AaGXhdf1A_mdSucUX8JpFQ-AaGXhdf1m2KMAawBBA-Ljw.png?fit=1680%2C944&ssl=1","contentUrl":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/11\/AaGXhdf1A_mdSucUX8JpFQ-AaGXhdf1m2KMAawBBA-Ljw.png?fit=1680%2C944&ssl=1","width":1680,"height":944,"caption":"Ilustrasi AI agent memegang akses ke server produksi"},{"@type":"BreadcrumbList","@id":"https:\/\/zaf.web.id\/blog\/bahaya-memasang-mcp-server-ai-agent-di-server-produksi\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/zaf.web.id\/blog\/"},{"@type":"ListItem","position":2,"name":"Bahaya Memasang MCP Server \/ AI Agent di Server Produksi"}]},{"@type":"WebSite","@id":"https:\/\/zaf.web.id\/blog\/#website","url":"https:\/\/zaf.web.id\/blog\/","name":"Ahmad Zafrullah","description":"Work to Learn is better than Learn how to Work","publisher":{"@id":"https:\/\/zaf.web.id\/blog\/#\/schema\/person\/ba4e955d59a1e6a8284857e74b14e5ed"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/zaf.web.id\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"id"},{"@type":["Person","Organization"],"@id":"https:\/\/zaf.web.id\/blog\/#\/schema\/person\/ba4e955d59a1e6a8284857e74b14e5ed","name":"Zaf","image":{"@type":"ImageObject","inLanguage":"id","@id":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2024\/09\/zaf_auto_x2.jpeg?fit=300%2C300&ssl=1","url":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2024\/09\/zaf_auto_x2.jpeg?fit=300%2C300&ssl=1","contentUrl":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2024\/09\/zaf_auto_x2.jpeg?fit=300%2C300&ssl=1","width":300,"height":300,"caption":"Zaf"},"logo":{"@id":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2024\/09\/zaf_auto_x2.jpeg?fit=300%2C300&ssl=1"},"sameAs":["http:\/\/zaf.web.id","http:\/\/www.facebook.com\/23Pstars","https:\/\/x.com\/23Pstars"],"url":"https:\/\/zaf.web.id\/blog\/author\/zaf\/"}]}},"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":2210,"url":"https:\/\/zaf.web.id\/blog\/deteksi-otomatis-spam-judi-online-notifikasi-telegram\/","url_meta":{"origin":2217,"position":0},"title":"Deteksi Otomatis Spam Judi Online di Server + Notifikasi Telegram","author":"Zaf","date":"Februari 8, 2026","format":false,"excerpt":"Di tulisan Berburu Malware di Server Linux saya membagikan perintah manual untuk mencari halaman slot dan judi yang disisipkan ke website. Masalahnya, cara manual baru dilakukan setelah ada laporan. Kali ini kita otomatiskan: server memindai dirinya sendiri dan melapor ke Telegram, mirip dengan tulisan saya tentang logging PHP ke Telegram.\u2026","rel":"","context":"dalam &quot;Programming&quot;","block_context":{"text":"Programming","link":"https:\/\/zaf.web.id\/blog\/category\/programming\/"},"img":{"alt_text":"Notifikasi Telegram peringatan spam judi online dari server","src":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/10\/AaFdO_TNeLM_oLjVSGt20w-AaFdO_TNb-2buyUn0rNnOA.jpg?fit=1200%2C674&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/10\/AaFdO_TNeLM_oLjVSGt20w-AaFdO_TNb-2buyUn0rNnOA.jpg?fit=1200%2C674&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/10\/AaFdO_TNeLM_oLjVSGt20w-AaFdO_TNb-2buyUn0rNnOA.jpg?fit=1200%2C674&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/10\/AaFdO_TNeLM_oLjVSGt20w-AaFdO_TNb-2buyUn0rNnOA.jpg?fit=1200%2C674&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/10\/AaFdO_TNeLM_oLjVSGt20w-AaFdO_TNb-2buyUn0rNnOA.jpg?fit=1200%2C674&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":981,"url":"https:\/\/zaf.web.id\/blog\/serangan-adware-via-htaccess\/","url_meta":{"origin":2217,"position":1},"title":"Serangan Adware via .htaccess","author":"Zaf","date":"Desember 17, 2016","format":false,"excerpt":"Bukan pertama kalinya beberapa server kami mendapatkan serangan dengan teknik yang berbagai macam jenis, bentuk, dan dampaknya. Pagi ini\u00a0sempat kaget karena semua website yang ada dalam server Gili Air\u00a0kami diarahkan ke situs iklan ketika diakses dari perangkat mobile. Saat ditelusuri ternyata semua file .htaccess nya telah disusupi semua, untuk mendeteksi\u2026","rel":"","context":"dalam &quot;Server&quot;","block_context":{"text":"Server","link":"https:\/\/zaf.web.id\/blog\/category\/server\/"},"img":{"alt_text":".htaccess malware inject","src":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2016\/12\/Screen-Shot-2016-12-15-at-5.34.42-PM-1024x680.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2016\/12\/Screen-Shot-2016-12-15-at-5.34.42-PM-1024x680.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2016\/12\/Screen-Shot-2016-12-15-at-5.34.42-PM-1024x680.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":644,"url":"https:\/\/zaf.web.id\/blog\/ampps-solusi-web-server-stack-pada-mac-os-x-el-capitan\/","url_meta":{"origin":2217,"position":2},"title":"AMPPS &#8211; Solusi Web Server Stack pada Mac OS X El Capitan","author":"Zaf","date":"September 24, 2015","format":false,"excerpt":"Pada OS X 10.8 (Mountain Lion) keatas, termasuk\u00a0yang saya gunakan (OS X 10.10 Yosemite)\u00a0telah dibekali dengan dengan apache secara default, tinggal mengaktifkan nya saja dengan perintah Sebelum August 2015, saya masih menggunakan OS X Yosemite di MacBook Pro saya. Hingga muncul versi\u00a0terbaru dari OS X El Capitan dengan berbagai fitur\u2026","rel":"","context":"dalam &quot;macOS&quot;","block_context":{"text":"macOS","link":"https:\/\/zaf.web.id\/blog\/category\/macos\/"},"img":{"alt_text":"OS X El Capitan","src":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2015\/09\/os_x_el_capitan.jpg?resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2015\/09\/os_x_el_capitan.jpg?resize=350%2C200 1x, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2015\/09\/os_x_el_capitan.jpg?resize=525%2C300 1.5x, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2015\/09\/os_x_el_capitan.jpg?resize=700%2C400 2x"},"classes":[]},{"id":1779,"url":"https:\/\/zaf.web.id\/blog\/logging-report-php-pada-web-server-apache-ke-telegram\/","url_meta":{"origin":2217,"position":3},"title":"Logging Report PHP pada Web Server Apache ke Telegram","author":"Zaf","date":"Mei 5, 2021","format":false,"excerpt":"Sistem atau aplikasi yang baik adalah yang memiliki tingkat error yang minim, bahkan jika memungkinkan tidak terdapat error sekecil apapun. Namun seperti yang dikatakan banyak orang, tidak ada sistem yang sempurna, yang ada hanya bagaimana meminimalisir error tersebut. Log membantu developer untuk melakukan identifikasi jika ada hal yang tidak sesuai\u2026","rel":"","context":"dalam &quot;Inspirasi&quot;","block_context":{"text":"Inspirasi","link":"https:\/\/zaf.web.id\/blog\/category\/inspirasi\/"},"img":{"alt_text":"Apache Log Telegram Notif","src":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2021\/05\/telegram-pustik-syslog.png?fit=922%2C573&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2021\/05\/telegram-pustik-syslog.png?fit=922%2C573&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2021\/05\/telegram-pustik-syslog.png?fit=922%2C573&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2021\/05\/telegram-pustik-syslog.png?fit=922%2C573&ssl=1&resize=700%2C400 2x"},"classes":[]},{"id":1048,"url":"https:\/\/zaf.web.id\/blog\/ketika-ddos-menyerang\/","url_meta":{"origin":2217,"position":4},"title":"Ketika DDoS menyerang","author":"Zaf","date":"April 1, 2017","format":false,"excerpt":"Mengelola server merupakan pekerjaan yang tidak\u00a0selalu mudah. Sesuatu\u00a0yang sifatnya open public pastinya memiliki banyak ancaman yang tidak pernah dapat ditebak kapan datangnya. Berapa tahun terakhir saya bertugas untuk mengelola beberapa server\u00a0yang\u00a0menaungi cukup banyak website, mulai dari bisnis, personal, iseng, sampai yang tidak penting. DigitalOcean Sejauh ini layanan VPS (Virtual Private\u2026","rel":"","context":"dalam &quot;Server&quot;","block_context":{"text":"Server","link":"https:\/\/zaf.web.id\/blog\/category\/server\/"},"img":{"alt_text":"DDoS everywhere","src":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2017\/03\/ddos-ddos-everywhere.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2017\/03\/ddos-ddos-everywhere.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2017\/03\/ddos-ddos-everywhere.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":1954,"url":"https:\/\/zaf.web.id\/blog\/mitigasi-malware-di-web-server-dan-cara-membersihkannya\/","url_meta":{"origin":2217,"position":5},"title":"Mitigasi Malware di Web Server dan Cara Membersihkannya","author":"Zaf","date":"November 23, 2022","format":false,"excerpt":"Malware selalu menjadi hal yang merepotkan. Umumnya pembuat malware tidak membuat malware untuk sekedar ajang pamer layaknya defacement. Malware dibuat demi tujuan yang lebih besar dan masif, dan biasanya tidak berjalan secara sendiri-sendiri melainkan menjadi sebuah network atau perkumpulan. Discovery Disuatu pagi tiba-tiba salah satu website yang kami kelola menunjukkan\u2026","rel":"","context":"dalam &quot;Security&quot;","block_context":{"text":"Security","link":"https:\/\/zaf.web.id\/blog\/category\/security\/"},"img":{"alt_text":"Mencari induk malware","src":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2022\/11\/6.-cari-dan-hapus-file-ico.png?fit=795%2C241&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2022\/11\/6.-cari-dan-hapus-file-ico.png?fit=795%2C241&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2022\/11\/6.-cari-dan-hapus-file-ico.png?fit=795%2C241&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2022\/11\/6.-cari-dan-hapus-file-ico.png?fit=795%2C241&ssl=1&resize=700%2C400 2x"},"classes":[]}],"jetpack_likes_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p4zLnS-zL","jetpack_featured_media_url":"https:\/\/i0.wp.com\/zaf.web.id\/blog\/wp-content\/uploads\/2026\/11\/AaGXhdf1A_mdSucUX8JpFQ-AaGXhdf1m2KMAawBBA-Ljw.png?fit=1680%2C944&ssl=1","_links":{"self":[{"href":"https:\/\/zaf.web.id\/blog\/wp-json\/wp\/v2\/posts\/2217","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zaf.web.id\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zaf.web.id\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zaf.web.id\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/zaf.web.id\/blog\/wp-json\/wp\/v2\/comments?post=2217"}],"version-history":[{"count":2,"href":"https:\/\/zaf.web.id\/blog\/wp-json\/wp\/v2\/posts\/2217\/revisions"}],"predecessor-version":[{"id":2222,"href":"https:\/\/zaf.web.id\/blog\/wp-json\/wp\/v2\/posts\/2217\/revisions\/2222"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/zaf.web.id\/blog\/wp-json\/wp\/v2\/media\/2218"}],"wp:attachment":[{"href":"https:\/\/zaf.web.id\/blog\/wp-json\/wp\/v2\/media?parent=2217"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zaf.web.id\/blog\/wp-json\/wp\/v2\/categories?post=2217"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zaf.web.id\/blog\/wp-json\/wp\/v2\/tags?post=2217"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}