Tool Poisoning on MCP Servers: The Attack Vector Nobody's Patching

Everybody's shipping AI agents. Nobody's auditing their toolchains. The MCP (Model Context Protocol) ecosystem grew from a specification into production infrastructure faster than most teams can spell "threat model." And that speed left a gap: the layer where an agent decides which tool to call, and what parameters to pass, is now an exploitable...