Page 7 of 13

MCP security

Tool poisoning, rug pulls, tool shadowing, OAuth scopes and server authentication — with a lab where a malicious MCP-style server exfiltrates a fictional secret.

37 min read · October 11, 2026