Glossary
Tool poisoning
Updated
An attack in which a tool or MCP server (its description, schema, or output) is crafted to manipulate an agent into taking harmful actions, such as leaking credentials or calling a dangerous tool. It is a supply-chain risk specific to agentic systems.