build1 publisher
The MCP client injects a server's tool descriptions into the same context as the system prompt
A dev.to analysis of the Model Context Protocol argues the tool layer is where an attacker gets to write instructions, and that the agent then carries them out holding credentials the content author never had.
Publishers:dev.to
Reality
- Evidence45
- Adoption
- Insufficient
- Hype gap+5
- Incentives25
- Confidence50