Unverified50% confidenceSolutionExact time
在MCP层可以注入恶意工具返回值、拦截审计Agent的工具调用、模拟工具失败等边界情况，使MCP层成为对抗测试的注入点与观测窗
1
Sources
50%
Confidence
Long-term
Relevance
7/16/2026
First Seen
Sources
Related Claims
VerifiedMCP tools are essentially arbitrary code execution, indirect prompt injection is a real-world threat, and attack vectors can be hidden in resource content rather than in direct user input.77% similarUnverified当某个MCP工具未被正确触发时，暂时关闭其他MCP工具减少干扰后重新运行，往往能帮助模型识别到正确的工具77% similarUnverifiedMCP defines a standard response mechanism for errors occurring during tool calls.75% similarUnverifiedMCP Inspector is a built-in tool that can connect to a server, list exposed tools, and allow manual invocation for testing.74% similarUnverifiedWhen configuring a custom MCP Server in the experimental field, it is necessary to disable the platform's built-in tools such as Amap Maps, Time, and Fetch to prevent conflicts.72% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/535985API
curl https://kongchang.com/api/v1/knowledge/claims/535985MCP
get_claim(id=535985)