Sentry MCP server
Named by 3 kept items in this workspace.
2 items name it under affected products and 1 under tools.
Search every workspace for Sentry MCP server. It matches the name as written, so it can find other things that share it.
The items that name it 3
Exploited in Agentjacking: accepts arbitrary payloads via public Sentry DSNs and hands fabricated error events to agents as trusted tool output, embedding malicious npx commands.
Returns Sentry event data to AI agents as trusted system output; exploited as the delivery mechanism for injected instructions.
Returns Sentry event data to AI agents as trusted system output; core of the architectural flaw
All technologies in this workspace.