16:56
2026-09-22
dev.to
ai-agents
MCP Tool Poisoning: A Name Allowlist Is Not Enough
A developer built a four-container demo showing that deny-by-default tool-name allowlists fail to stop MCP tool poisoning, because an MCP server can rewrite its own tool descriptions mid-session afterβ¦