Tool Poisoning on MCP Servers: The Attack Vector Nobody's Patching
The MCP (Model Context Protocol) ecosystem grew from a specification into production infrastructure faster than most teams can spell "threat model." And that speed left a gap: the layer where an agent