MCP Describe Injection: Audit Tool Descriptions Like Code
Tool poisoning hides malicious instructions in MCP tool descriptions before any code runs. Practical guide to the MCPTox data, the spec boundary, and a no-vendor hardening checklist.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.