MCPAI SECURITY ENGINEERING

Tool description poisoning

Tool descriptions influence model tool selection and can become a supply-chain channel if a server or manifest is compromised.

WHY IT MATTERS

Models use natural-language tool metadata as part of their reasoning context.

ENTERPRISE EXAMPLE

A compromised tool manifest adds instructions unrelated to the tool's legitimate purpose.

SECURITY DECISION

Which security control should be explicit?

REMEMBERTool metadata is executable influence for the model.
No uploads · No company data · No account required