← Back to glossary
Glossary

Tool Poisoning

Reviewed 20 March 2026 Canonical definition

An attack where a malicious MCP tool impersonates a legitimate service or injects hidden instructions into its responses, manipulating agent behavior without the user's knowledge.