Unverified50% confidenceFactExact time
The confused deputy problem is one of the MCP security risks: an MCP Server holding broad credentials performs operations on behalf of a user who should not have that permission.
1
Sources
50%
Confidence
Long-term
Relevance
10/24/2026
First Seen
Sources
MCP Protocol Explained: How a Single Email Can Hijack Your AI Agent
youtubeHaikotek10/24/2026
Related Entities
Related Claims
UnverifiedThe MCP specification requires that tool annotations be treated as untrusted unless the server is trusted.80% similarUnverifiedConnecting an MCP Server to an external system often involves network requests, third-party credentials and remote data, and its security and trust boundary is noticeably wider than that of built-in tools.79% similarUnverifiedThe caller of an MCP server is a model that may be misled, injected or simply make mistakes, so the security design must achieve "even if it errs, the fragmenting consequences are small and visible."79% similarUnverifiedMCP tools typically require elevated system permissions to operate local software, and once maliciously exploited, the damage they can cause may far exceed that of vulnerabilities in ordinary open-source libraries.78% similarVerifiedUnlike AgentReach, an MCP server exposes a unified protocol endpoint as an intermediate layer, meaning every call must pass through that intermediate layer, which can become a performance bottleneck or single point of failure.78% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1093000API
curl https://kongchang.com/api/v1/knowledge/claims/1093000MCP
get_claim(id=1093000)