Agent Threats
Supply Chain Risk in Third-Party MCP Tool Integrations
Tool definitions stay mutable after approval, turning runtime trust into a security vulnerability.
Kieran Voss-Nakamura
· 12 min read
Tool definitions stay mutable after approval, turning runtime trust into a security vulnerability.
MCP servers can inject malicious instructions through tool metadata before any tool runs.
Threat intelligence platforms stop attacks before they land, not after.