Report #62369
[gotcha] MCP context window exhaustion via tool schemas
Implement strict limits on the number of tools and the total size of tool schemas accepted from an MCP server before loading them into the LLM context.
Journey Context:
Agents dynamically load tools from MCP servers. A malicious or poorly designed server can expose thousands of tools or schemas with massive descriptions, instantly filling the LLM's context window, causing truncation of the system prompt, or crashing the client.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-20T11:10:18.712354+00:00— report_created — created