{
 "generated": "2026-11-01",
 "node": {
  "id": "inst:mcp-tool-poisoning-disclosure",
  "type": "Instrument",
  "name": "MCP工具投毒攻击（原始披露）",
  "slug": "mcp-tool-poisoning-disclosure",
  "kind": "research",
  "kind_zh": "论文 / 研究",
  "date": "2025-04",
  "summary": "Invariant Labs 披露：MCP 工具描述字段（模型可见、人类不审查）可藏恶意指令；后续学术 benchmark 测出 45+ 真实 MCP 服务器攻击成功率超 60%。",
  "evidence": [
   {
    "kind": "own",
    "url": "https://xiaopingfeng.com/landscape/agent-security/#player-tool-poisoning",
    "text": "Landscape「Agent 安全攻击面」第 03 层「工具调用 / MCP滥用」的卡片「MCP工具投毒攻击（原始披露）」：研究 · Invariant Labs 2025-04"
   }
  ],
  "entry": "agent",
  "by": "landscape-facts",
  "at": "2026-11-01T11:19:35Z",
  "landscape": [
   {
    "map": "agent-security",
    "map_title": "Agent 安全攻击面",
    "card": "player-tool-poisoning",
    "title": "MCP工具投毒攻击（原始披露）",
    "layer": "工具调用 / MCP滥用",
    "layer_id": "layer:agent-security--3",
    "role": "primary"
   }
  ],
  "landscape_maps": [
   "agent-security"
  ],
  "landscape_n": 1,
  "degree": 0
 },
 "page": "https://xiaopingfeng.com/graph/e/inst/mcp-tool-poisoning-disclosure/",
 "out": [
  {
   "type": "involves",
   "sentence": "MCP工具投毒攻击涉及Invariant Labs",
   "direction": "out",
   "id": "org:invariant-labs",
   "name": "Invariant Labs",
   "role": "discloser",
   "note": "原始披露方",
   "status": "agent",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 03 层「工具调用 / MCP滥用」的卡片「MCP工具投毒攻击（原始披露）」：研究 · Invariant Labs 2025-04",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-tool-poisoning"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "MCP工具投毒攻击出现在 Landscape 的「工具调用 / MCP滥用」",
   "direction": "out",
   "id": "layer:agent-security--3",
   "name": "工具调用 / MCP滥用",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 03 层「工具调用 / MCP滥用」：卡片「MCP工具投毒攻击（原始披露）」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-tool-poisoning"
    }
   ]
  }
 ],
 "in": []
}