gensecaihq/mcp-poisoning-poc
This repository demonstrates a variety of **MCP Poisoning Attacks** affecting real-world AI agent workflows.
This project helps AI security professionals identify and understand critical vulnerabilities within AI agent workflows that utilize the Model Context Protocol (MCP). It takes malicious tool descriptions or configurations as input and demonstrates how they can lead to sensitive data exfiltration or AI agent hijacking. The output is a clear understanding of potential attack vectors and robust defensive measures, intended for security engineers, AI system architects, and incident response teams.
No commits in the last 6 months.
Use this if you are responsible for securing AI systems and need to proactively identify and mitigate 'tool poisoning' vulnerabilities in your AI agents that use the Model Context Protocol (MCP).
Not ideal if you are looking for a general-purpose AI development tool or if your AI agents do not rely on the Model Context Protocol (MCP) for tool integration.
Stars
14
Forks
5
Language
Python
License
MIT
Category
Last pushed
Jun 14, 2025
Commits (30d)
0
Get this data via API
curl "https://pt-edge.onrender.com/api/v1/quality/mcp/gensecaihq/mcp-poisoning-poc"
Open to everyone — 100 requests/day, no key needed. Get a free key for 1,000/day.
Higher-rated alternatives
Wh0am123/MCP-Kali-Server
MCP configuration to connect AI agent to a Linux machine.
DMontgomery40/pentest-mcp
NOT for educational purposes: An MCP server for professional penetration testers including...
BurtTheCoder/mcp-shodan
MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and...
cyproxio/mcp-for-security
MCP for Security: A collection of Model Context Protocol servers for popular security tools like...
0x4m4/hexstrike-ai
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot,...