Analysis
MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers
Publication date unknown · Discovered arxiv.org
Page published
Publication date unknown · First observed: 11 Nov 2026
Coverage timeline
Single-source analysis — one report is available.
Why it matters
MCP tool metadata can redirect agents into unauthorized operations, making tool integrity, least privilege, and runtime enforcement important controls for defenders.
NeuralTrust’s MCP Security Best Practices Checklist outlines least privilege, pinned tool definitions, sandboxing, OAuth audience checks, human approval for risky actions, and runtime logging and enforcement. Supporting MCPTox research documents widespread agent susceptibility to malicious instructions embedded in tool metadata.