Deprecating My Symfony Profiler MCP Bundle: Right About the Problem, Half-Wrong About the Solution

说明与用途

mcp-profiler-bundle 通过 MCP 暴露 Symfony Profiler 数据，但缺乏代理指导且存在安全问题。Symfony AI Mate 引入 CLI 与 Agent Skills，提升了可用性和安全性。

问题

Developers needed an AI agent to read Symfony Profiler data, but the initial bundle exposed data without guiding the agent on how to use it, leading to low adoption and security issues.

结果

The bundle demonstrated the problem of exposing profiler data but failed to provide guidance (skills) and had security and protocol issues. Symfony’s official solution addressed these gaps, leading to higher agent adoption and safer data handling.

工作流

• 1. Build MCP server exposing profiler tools via stdio.
• 2. Deploy bundle and run bin/console mcp:server:run to start server.
• 3. Agents call tools via MCP JSON‑RPC.
• 4. Observe low agent usage and security concerns.
• 5. Symfony releases official MCP SDK and AI Mate with CLI and Agent Skills.
• 6. Deprecated bundle and shift to Mate’s approach.

证据

Mate’s answer is Agent Skills — SKILL.md files installed into .agents/skills/ that say when to reach for which tool.

来源

The bundle had no redaction and exposed cookies, headers, and env vars.

来源

Symfony AI Mate shipped its first release on 23 December 2025, about nine months after my 0.1.0.

来源