MCP
Named by 17 kept items in this workspace.
14 items name it under tools and 3 under affected products.
Search every workspace for MCP. It matches the name as written, so it can find other things that share it.
The items that name it 17
Protocol whose tools expose natural-language descriptions that agents read when choosing and ordering tool calls; the paper finds agents can be steered to call an attacker logging tool
Model Context Protocol
Model Context Protocol
Support added by Microsoft to SQL Copilot after the May 2026 research.
Using LLMs for vulnerability research, described by @ZephrFish
Standard way for an agent to connect to outside tools and data (e.g., read a database, call an API, run a command)
Standard protocol allowing agents to call external tool services; ecosystem cited as source of risk (tool poisoning)
open standard for exposing tools to agents
Controls and mediates what tools/commands the AI agents can execute against the Docker Toolbox
protocol by which tools are provided to agents via MCP servers, now a Linux Foundation project
Standard protocol for loading external tools into Kiro; configuration lives in ~/.kiro/settings/mcp.json
Protocol used by Cursor to let AI coding agents install and run external 'MCP servers' that execute commands; the install mechanism (mcp/install) is the attack target
Gives AI agents a way to connect to external tools and data sources (code repositories, browser automation, documentation, local files, issue trackers, design tools, etc.); found installed by 50.8% of developers scanned, acting as a new access/supply-chain layer
Protocol for connecting PentestAgent to external tool servers and for exposing PentestAgent itself as a server (stdio/SSE transports)
MCP Python SDK
All technologies in this workspace.