MCP tool poisoning: what it looks like, and how to catch it before a server is connected
A developer released lazaretto-guard, a free Claude Code plugin that scans MCP servers for tool-poisoning attacks before an agent connects to them. When a remote server is added via `claude mcp add` or written into `.mcp…