What tool poisoning actually looks like in an MCP manifest
This story is from 2026-09-09. It is preserved in the archive; the latest stories are on the live feed.
A tool description reaches the model as instructions. It is written by whoever published the server, and in most clients nobody reads it after the first install. Here is what people put in them. Characters that render as nothing The Unicode Tags block, U+E0000 to U+E007F , was intended for language…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-09-09 14:09 · DEV Community — AI
What tool poisoning actually looks like in an MCP manifest