invariantlabs-ai/mcp-injection-experiments
View on GitHub ↗ ★ 211 Python
Code snippets to reproduce MCP tool poisoning attacks.
3 mentions on Hacker News by 3 people: 0 stories, 3 comments · first 2025-04-06 · latest 2025-04-14
20082026
-
I've recently written a custom MCP server. > An MCP server is at it's heart some 'thing' that provides a set of 'tools' that an LLM can invoke. A "tool" is one of several capabilities that a MCP server can provide to its callers. Other…
comment by kiitos · 2025-04-14 · in Everything wrong with MCP -
> they only incur a cost to the client, and only impact the user context, if/when they're invoked. Look it up. Look up the cross server injection examples. I guarantee you this is not true. An MCP server is at it's heart some 'thing' that…
comment by noodletheworld · 2025-04-14 · in Everything wrong with MCP -
The post highlights and cites a few attack scenarios we originally described in a security note (tool poisoning, shadowing, MCP rug pull), published a few days ago [1]. I am the author of said blog post at Invariant Labs. Different from…
comment by lbeurerkellner · 2025-04-06 · in The “S” in MCP Stands for Security