AIQB
TutorialsOrdinary

What tool poisoning actually looks like in an MCP manifest

Source: DEV Community·

Summary

A tool description reaches the model as instructions. It is written by whoever published the server,...
CategoryAI Tutorials & Practice
TierOrdinary
Published
Indexed by AIQB
SourceDEV Community
AIQB record IDintel-417583eb847374fb4fa6f46a
Read original source ↗More Tutorials

Related stories

Matched by category, entity tags and source

TutorialsOrdinary
Debugging PHP in Docker with an AI Agent and Xdebug
For a while now I have used LLMs to automate parts of my work. One of those parts is debugging hard...
Source: DEV Community
TutorialsOrdinary
My LLM eval cried wolf. Here's what I measured.
Disclosure first: I write digline, a small Python library for regression testing LLM applications....
Source: DEV Community
TutorialsOrdinary
I Hid a Rule in CLAUDE.md. Only One Reviewer Could Prove It Read It.
"Does your AI code reviewer read CLAUDE.md?" is the wrong question to ask. Almost any of them will...
Source: DEV Community · Claude
TutorialsOrdinary
A backend has to fail twice, and one failure is not an outage
The first version of my router failed over on the first error and flapped constantly. The reason...
Source: DEV Community
TutorialsOrdinary
How I Taught My AI Coding Agent to Stop Undoing My Design Decisions
TL;DR My AI coding agent kept "fixing" things I had broken on purpose — reverting...
Source: DEV Community
TutorialsOrdinary
The Verification Bottleneck in AI-Generated Software
AI can generate code faster than ever. That doesn't mean we're shipping correct software...
Source: DEV Community
TutorialsOrdinary
I Tackled the Planet of Lana Language Challenge by Building an AI Translator & Voice Synthesizer
The developers of Planet of Lana challenged fans to speak Novo Terali. Instead of a simple social shoutout, I built an end-to-end conlang translation engine, voice synthesizer, and quarantine panel.
Source: DEV Community
TutorialsOrdinary
I Ran a Fire Drill for Incident Response with a Local LLM (and Caught It Making Things Up)
A Japanese version of this is on Note. RoamSwitch is a network security tool I build solo for Mac...
Source: DEV Community
TutorialsOrdinary
MCP security scanners are wrong about four findings in five, and the cause is structural
An independent audit in April 2026 measured roughly a 78% false positive rate from regex-based MCP...
Source: DEV Community
TutorialsOrdinary
How I Built an AI Agent That Cut My AWS Bill by 40% (CrewAI + Bedrock)
Last week my AWS bill hit $300. I knew there was waste hiding somewhere. Forgotten EBS volumes, idle...
Source: DEV Community