MCP Prompt Injection Before the First Tool Call

Originally published at webofmike.com on 2026-09-11. The demo repo and every command in it were run before publishing. I built a red-team lab for the part of MCP that runs before any tool call: the in