Vet a third-party MCP server before you trust it: sandboxed connect-and-enumerate plus deterministic security detectors.