Unverified50% confidenceFactExact time
MCP server spoofing attacks exploit the assumption in the protocol design that servers are trusted by default, rather than exploiting vulnerabilities in the traditional sense.
1
Sources
50%
Confidence
Long-term
Relevance
10/8/2026
First Seen
Sources
Related Entities
Related Claims
Unverified安全研究人员发现一个恶意MCP服务器伪装成正规邮件转发服务Postmark MCP，实际会在每封邮件密送一份给攻击者77% similarUnverifiedSupply-chain-level MCP attack patterns include typosquatted servers and rug pulls (i.e., tool definitions that are silently altered after being approved).76% similarUnverifiedUnlike AgentReach, an MCP server exposes a unified protocol endpoint as an intermediate layer, meaning every call must pass through that intermediate layer, which can become a performance bottleneck or single point of failure.76% similarUnverifiedBy connecting to official MCP servers provided by service vendors, agents obtain validated, structurally defined tool interfaces, reducing the probability of errors from guessed calls.75% similarUnverifiedCommon anti-patterns for MCP servers include excessive authorization, lack of request source validation, hardcoding sensitive credentials on the server side, and insufficient filtering of instructions passed in by agents.75% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/987546API
curl https://kongchang.com/api/v1/knowledge/claims/987546MCP
get_claim(id=987546)