Credential & data attacks

Attacks targeting credentials, sessions, and sensitive data flowing through MCP tool calls. Over-scoped tokens, predictable session IDs, and verbose errors all turn an agent into an unintentional leak channel.