ATR-2026-00095criticalTool Poisoningdraft
MCP Tool Supply Chain Poisoning
Detects tool poisoning attacks targeting the MCP (Model Context Protocol) skill/tool supply chain. Attackers inject malicious payloads into tool descriptions, return values, or schemas that are consumed by agents, causing unintended code execution, data exfiltration, or privilege escalation when the poisoned tool is invoked.
Severity
critical
Category
Tool Poisoning
Scan Target
mcp
Author
ATR Community (MiroFish Predicted)
Response Actions
block inputquarantine sessionalertescalatekill agent
References
MITRE ATLAS
AML.T0053