Software Securityhome
Fix a findingSearch
Glossary

Tool poisoning

Hidden instructions in a tool’s name, description or schema that steer an AI agent reading them; a server can also change a definition after users approved it. Pin a hash of each reviewed definition and review any change.

Covered in

Guide

Constrain MCP and multi-agent trust boundaries

Validate each connection and delegated action without treating a token for another service, a tool description, another agent or a state handle as authority.

Practice: Local project: Enforce retrieval and tool boundaries across crashes

Find your next answer

Type to search. Search runs in your browser.

Searches run in your browser, but the host can infer them from the index files they load. The address shows your search so you can bookmark or share it.