MCP Tool Poisoning in Agentic AI Frameworks: A Cross-Framework Measurement Study
The Model Context Protocol (MCP) lets agentic AI frameworks connect language models to external tool providers, but it carries attacker-controlled content (tool descriptions, schema fields, and response data) into model context without validation. Prior benchmarks measure model compliance with poisoned instructions without confirming real execution. We present the first cross-framework…
We haven't written up this one. arXiv cs.AI has the full story — the link below goes straight to it.
