Type: url
Original: https://arxiv.org/pdf/2601.07395
Status: generated
Summary
“MCP-ITP: An Automated Framework for Implicit Tool Poisoning in MCP” (arXiv:2601.07395) studies implicit tool poisoning, a stealthy variant of tool poisoning in the Model Context Protocol ecosystem in which a poisoned tool is never itself invoked; instead, instructions in its metadata induce the agent to call a legitimate but high-privilege tool to perform malicious operations. The authors propose MCP-ITP, which frames poisoned-tool generation as a black-box optimization problem and iteratively refines tool descriptions using feedback from an evaluator LLM and a detector LLM. On the MCPTox dataset across 12 LLM agent settings it outperforms MCPTox’s manually crafted poisoned tools, reaching up to 84.2% attack success rate while keeping the malicious-tool detection rate as low as 0.3%.