build1 publisher
A caching proxy handed one caller's poisoned MCP instructions to a client that never connected
MCP's instructions field is server-controlled prose that lands at connect, before any tool exists to pin it. A four-second lab run shows a shared caching proxy storing a hostile copy and serving it to a caller that never asked.
Publishers:dev.to
Reality
- Evidence62
- Adoption44
- Hype gap+15
- Incentives28
- Confidence55