What is the primary purpose of this project?
This is a security research project by GenSecAI that demonstrates and defends against MCP tool poisoning vulnerabilities for educational and defensive use only.
MCP Poisoning Attack - PoC
@wbfoss
Basic information
About MCP Poisoning Attack - PoC
This repository demonstrates a variety of **MCP Poisoning Attacks** affecting real-world AI agent workflows.
MCP Poisoning Attack - PoC config
Add this server to your MCP-compatible client using the configuration below.
{
"mcpServers": {
"mcp-poisoning-poc": {
"command": "python",
"args": [
"-m",
"venv",
"venv"
]
}
}
}MCP Poisoning Attack - PoC tools
Tool list not available yet
This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.
We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.
Overview
What is MCP Poisoning Attack - PoC?
MCP Poisoning Attack - PoC is a security research proof-of-concept by GenSecAI that demonstrates critical vulnerabilities in the Model Context Protocol (MCP), enabling attackers to exfiltrate data, hijack AI agent behavior, and override security controls through malicious tool descriptions. It is intended for security researchers, AI developers, and defenders seeking to understand and mitigate MCP tool poisoning attacks.
How to use MCP Poisoning Attack - PoC?
Clone the repository, create a Python virtual environment, install dependencies with pip install -r requirements.txt, then run python examples/basic_attack_demo.py. The code provides a MaliciousMCPServer class to simulate attacks and a SecureMCPClient with sanitization, validation, and monitoring for defense.
Key features of MCP Poisoning Attack - PoC
- Demonstrates data exfiltration via hidden tool descriptions
- Shows AI agent hijacking through prompt injection
- Includes time‑delayed attack payloads
- Provides sanitizer and validation defense framework
- Cross‑tool contamination attack simulation
- Ready‑to‑run examples and comprehensive test suite
Use cases of MCP Poisoning Attack - PoC
- Security researchers evaluating MCP‑based AI agent vulnerabilities
- Developers hardening MCP tool integrations against poisoning attacks
- Red teams assessing risk of malicious MCP servers in their pipeline
- Educators illustrating prompt injection and supply chain attacks in AI
Frequently asked questions
What are the runtime requirements?
It requires Python 3.8+ and standard dependencies listed in `requirements.txt`. No external MCP server runtime is needed.
Is this project safe to use in production?
No; it contains attack code meant for controlled environments only. The README explicitly warns against malicious use and encourages defensive focus.
Where does the data live?
All code and data reside locally in the cloned repository; no external data is transmitted by default.
What attack vectors are shown?
The project covers data exfiltration, tool hijacking, instruction override, and delayed payloads — all exploiting MCP’s trust in tool descriptions.
More Other MCP servers
Klarix Intelligence Engine
KlarixB2B competitive intelligence, live sales battlecards, 5-axis ICP prospect fit scoring, and tech stack teardowns over MCP and REST with cited public-web evidence.
🚀 Model Context Protocol (MCP) Curriculum for Beginners
microsoftThis open-source curriculum introduces the fundamentals of Model Context Protocol (MCP) through real-world, cross-language examples in .NET, Java, TypeScript, JavaScript, Rust and Python. Designed for developers, it focuses on practical techniques for building modular, scalable,
16.7K
Hindsight
vectorize-ioHindsight: Agent Memory That Learns
50.4K
N
Next Generation Movers: free moving quotes (remote MCP)
Next Generation MoversFree moving quotes for AI agents from Next Generation Movers, a licensed interstate mover (USDOT 3764697). US long-distance nationwide and local DC/MD/VA. Indicative ballpark price and booking options; optional $0.01 x40
MCP Toolbox for Databases
googleapisMCP Toolbox for Databases is an open source MCP server for databases.
15.9K
Comments