A tool built to demonstrate the risk of running a MCP from untrusted sources. It abusues default trust and chains vulnerabilits in MacOS keychain and a python library Keyring to exfiltrate secrets used by it's peer MCP servers running along side of it.