AegisGate Security has built tool poisoning defense into its open-source MCP server framework, screening every tool description at registration time before it is exposed to an LLM. The scanner runs 34…
Aggrete, an open-source MCP proxy, uses deterministic rules rather than probabilistic AI filters to block prompt-injection, tool poisoning, and rug-pull attacks on AI agents. The project demonstrates …
Ventrova's sentinel-scan-cli, Cisco's mcp-scanner, and Snyk Agent Scan (formerly Invariant Labs' mcp-scan) are compared as open-source security scanners for MCP servers. The comparison highlights diff…
A new public ledger documents 27 dated Model Context Protocol (MCP) security incidents and protocol revisions from April 2025 through August 24, 2026, with 25 incidents and 2 protocol revisions. Comma…
Ventrova's sentinel-scan-cli includes a static MCP manifest scanner that runs 10 heuristics to detect tool poisoning and excessive agency without starting a server or touching the network. The scanner…
Ventrova, an AI-run software organization, released a practical walkthrough for scanning MCP servers for tool poisoning, a prompt injection technique where hidden instructions in tool descriptions can…
Invariant Labs researchers demonstrated in April 2025 that a malicious Model Context Protocol server could silently exfiltrate a user's entire WhatsApp message history by hijacking a tool description,…
A context-assembly pipeline that turns raw issue tickets into verified briefs outperforms autonomous coding agents on real-world support queues, according to a design pattern published on dev.to this …
Bifrost, an open-source tool from Maxim, introduces MCP Tool Groups to solve the authorization and cost problems caused by uncurated tool access in MCP-based agent deployments, where a benchmark showe…
Vercel's AI SDK version ai@7.0.19, released July 9, 2026, adds fingerprintTools and detectToolDrift functions to catch Model Context Protocol (MCP) tools whose description, schema, or title silently c…
A developer built mcpward, a CI gate that pins the contract of MCP (Model Context Protocol) servers the way npm lockfiles pin dependencies. The tool snapshots tool descriptions, schemas, and annotatio…
Microsoft Incident Response has detailed a new attack pattern targeting AI agents that use Model Context Protocol (MCP) tools, where attackers poison tool metadata to manipulate agent actions. The tec…
AI-powered systems in production face critical security vulnerabilities, including prompt injection and tool-based exploits, as demonstrated by real-world incidents in 2025 such as a Supabase agent da…
Microsoft researchers propose using information-flow control (IFC) to secure autonomous AI agents against prompt injection and data exfiltration. IFC labels data with integrity and confidentiality tag…
The Model Context Protocol (MCP) is becoming the standard API for LLMs, but security vulnerabilities like path traversal and broken tenant isolation are emerging. To prevent damage from autonomous age…
A developer built ghostprobe, a red-team scanner for MCP servers that detects tool poisoning and the 'lethal trifecta' of data access, sink, and untrusted input. When pointed at real servers, it found…
The NSA’s Model Context Protocol (MCP) security guidance and the OWASP MCP Top 10 risk framework can be mapped together to create a testable checklist for vetting MCP servers before deployment. Resear…
Snyk's agent-scan tool analyzes MCP servers by actually executing them from the user's configuration files, retrieving tool descriptions via the MCP protocol, and sending that data to a third-party AP…