MCP Poisoning Attack - PoC

Name: MCP Poisoning Attack - PoC
Author: wbfoss

@wbfoss

Repository

About MCP Poisoning Attack - PoC

This repository demonstrates a variety of **MCP Poisoning Attacks** affecting real-world AI agent workflows.

#mcp #cybersecurity #mcpe-server #llm #aisecurity #agentic-ai #agenticworkflow #mcp-server

Basic information

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "mcp-poisoning-poc": {
      "command": "python",
      "args": [
        "-m",
        "venv",
        "venv"
      ]
    }
  }
}

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is MCP Poisoning Attack - PoC?

MCP Poisoning Attack - PoC is a security research proof-of-concept by GenSecAI that demonstrates critical vulnerabilities in the Model Context Protocol (MCP), enabling attackers to exfiltrate data, hijack AI agent behavior, and override security controls through malicious tool descriptions. It is intended for security researchers, AI developers, and defenders seeking to understand and mitigate MCP tool poisoning attacks.

How to use MCP Poisoning Attack - PoC?

Clone the repository, create a Python virtual environment, install dependencies with pip install -r requirements.txt, then run python examples/basic_attack_demo.py. The code provides a MaliciousMCPServer class to simulate attacks and a SecureMCPClient with sanitization, validation, and monitoring for defense.

Key features of MCP Poisoning Attack - PoC

Demonstrates data exfiltration via hidden tool descriptions
Shows AI agent hijacking through prompt injection
Includes time‑delayed attack payloads
Provides sanitizer and validation defense framework
Cross‑tool contamination attack simulation
Ready‑to‑run examples and comprehensive test suite

Use cases of MCP Poisoning Attack - PoC

Security researchers evaluating MCP‑based AI agent vulnerabilities
Developers hardening MCP tool integrations against poisoning attacks
Red teams assessing risk of malicious MCP servers in their pipeline
Educators illustrating prompt injection and supply chain attacks in AI

FAQ from MCP Poisoning Attack - PoC

What is the primary purpose of this project?

This is a security research project by GenSecAI that demonstrates and defends against MCP tool poisoning vulnerabilities for educational and defensive use only.