Tool Poisoning

What UX patterns help users make informed MCP approval decisions without approval fatigue?

Which approval UX pattern best reduces approval fatigue while preserving meaningful consent?

Explain the tool poisoning attack in MCP: mechanism, impact, and defenses

In an MCP tool poisoning attack, which field of the tool definition is the primary attack vector and why?

What is tool poisoning in MCP?

What criteria would you use to evaluate the quality of an MCP server's tool definitions before integration?

Which criteria indicate a high-quality MCP server tool definition?

What is a rug pull attack in MCP and why does the current spec offer no defense?

Why does the MCP spec not protect against rug pull attacks?

Describe three categories from the OWASP MCP Top 10 and what risks they codify

Which of the following are categories in the community-maintained OWASP MCP / Agentic AI risk taxonomy (2025)?

What does a rising approval-rejection ratio signal in a production MCP integration?

Which practices represent good host-side approval UX for MCP tool calls?

How can a malicious MCP server shadow a trusted server's tools in a multi-server setup?

Predict the LLM's behavior when a malicious server shadows a trusted tool without host namespacing