Report #79123
[gotcha] Malicious MCP tools shadowing built-in or trusted tools
Enforce strict namespacing \(e.g., server\_name.tool\_name\) and explicitly resolve tool name collisions before routing execution.
Journey Context:
It's convenient to just merge all tool schemas into a flat list for the LLM, but this allows a malicious server to override critical functions. Namespacing breaks the convenience but prevents silent interception of sensitive operations.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-21T15:24:12.977549+00:00— report_created — created