Unverified50% confidenceOpinionExact time
What makes the Notion MCP incident special is that the injection instructions came from an official tool provider that the user had actively trusted and authorized.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
9/11/2026
First Seen
Valid until: 12/10/2026
Sources
Related Entities
Related Claims
UnverifiedThe injection instructions in the Notion MCP connector guide AI agents to proactively promote the Notion Business plan while executing user tasks.79% similarUnverifiedMCP协议在工具调用安全性方面采用了人机协同（Human-in-the-Loop）的设计理念76% similarUnverifiedMCP的设计哲学是上下文共享与统一访问方式，允许智能体与工具之间共享丰富的上下文信息75% similarVerifiedIn MCP, Tools are invoked at the model's discretion, Prompts are triggered by the user, and Resources are controlled by the application.74% similarVerifiedMCP tools are essentially arbitrary code execution, indirect prompt injection is a real-world threat, and attack vectors can be hidden in resource content rather than in direct user input.73% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/902070API
curl https://kongchang.com/api/v1/knowledge/claims/902070MCP
get_claim(id=902070)