MCP Tool Poisoning: What Static Scanners Miss

The Model Context Protocol hands AI coding agents a list of tools — each with a name, a description, and an inputSchema. Before invoking any tool, the model reads its description. An attacker who cont