My security scanner scored 0 out of 485. So I looked inside GPT-2's brain instead.

Zero out of 485. That's what my security scanner scored against MCPTox, a dataset of poisoned tool descriptions pulled from 45 real MCP servers. I had 60 detection rules. I read the source code of 36 open-source MCP security tools to build them. Months of pattern-matching logic. Zero. Not low. Zero. What are MCP tool descriptions and why should you care If you use Claude, GPT, or any AI agent that connects to external tools, those tools come with text descriptions. The description tells the mode