MCP Server Security: Tool Poisoning, Rug Pulls, and Confused Deputies
Installing a community MCP server means running someone else's code with your credentials, and nothing resembling an app-store review checks it first. Here is what the research and the official spec actually document about tool poisoning, supply-chain risk, confused-deputy
