MCP Tool Poisoning

The MCP Tool Poisoning Attack (TPA) class: adversarial or compromised MCP servers plant malicious instructions in tool metadata or tool returns — anchored by ShareLock's threshold secret-sharing variant (>90% ASR past single-tool scanners), the Agentjacking legit-server relay case study, and the 2026-07-28 MCP spec revision leaving the rug-pull intact.