AAAI 2026technical0 citations
MCPTox: A Benchmark for Tool Poisoning on Real-World MCP Servers
Zhiqiang Wang, Yichao Gao, Yanting Wang, Suyuan Liu, Haifeng Sun, Haoran Cheng, Guanquan Shi, Haohua Du
Abstract
By providing a standardized interface for LLM agents to interact with external tools, the Model Context Protocol (MCP) is quickly becoming a cornerstone of the modern autonomous agent ecosystem. However, it creates novel attack surfaces due to untrusted external tools. While prior work has focused on attacks injected through external tool outputs, we investigate a more fundamental vulnerability: Tool Poisoning, where malicious instructions are embedded within a tool
BibTeX
@inproceedings{aaai2026_mcptoxabenchmark,
title = {MCPTox: A Benchmark for Tool Poisoning on Real-World MCP Servers},
author = {Zhiqiang Wang and Yichao Gao and Yanting Wang and Suyuan Liu and Haifeng Sun and Haoran Cheng and Guanquan Shi and Haohua Du and Xiangyang Li},
booktitle = {AAAI 2026},
year = {2026}
}