This page may contain stale information. Last updated: 2026-06-12
Overview
Application monitoring and error tracking platform; divested Codecov to focus on production observability. Provides MCP server integration enabling ai-coding-tools to query unresolved errors for automated remediation.
Recent Developments
- 2026-06-09: Tenet Security disclosed agentjacking attack exploiting Sentry DSN + MCP trust model (2026-06-10-agentjacking-tenet-security-primary)
- 2026-06-03: Tenet disclosed vulnerability chain to Sentry leadership; Sentry acknowledged but declined root fix, citing “technically not defensible”; added payload content filter only
- 2026-06-02: Sold codecov to harness; announced ongoing partnership for customer continuity
Agentjacking Context
- DSN design: Public, write-only credential intentionally embedded in frontend JavaScript
- Attack vector: Anyone with DSN can POST crafted error events to ingest endpoint
- MCP integration: Sentry MCP server returns event data to agents as trusted system output
- Exposure: 2,388 organizations with injectable DSNs found by Tenet Security
Sentry's partial fix (content filter for specific payload string) treats symptom, not architectural trust issue. Same risk applies to any MCP tool returning externally-influenced data.