MCP Tool Poisoning: The AI Supply Chain Attack Nobody Is Talking About

If you're building AI agents with Model Context Protocol, you have an attack surface you probably haven't thought about yet. It's not your prompts. It's not your model. It's the tool descriptions your agent reads before it does anything. What is MCP? Model Context Protocol is Anthropic's open standard that lets LLMs interact with external tools — databases, APIs, file systems, calendars, search engines. Your agent reads a tool's name, description, and parameter schema, then decides how to use it