MCP Attack Surface

Red-team Model Context Protocol (MCP) integrations. Learn the conceptual attack surface (server impersonation, tool-description injection, resource-content prompt injection, exfiltration through tool calls, supply-chain risk in third-party servers), the eval methodology, the defensive review pattern for new MCP servers (capability listing, schema review, content sanitation, audit logging), and the link to authorisation models.