Tool-Result Injection: The MCP Attack System Prompts Miss
A concrete walkthrough of indirect prompt injection delivered via MCP tool responses. The attack, the model's reasoning, and the policy that stops it.
// TAG
Architecture
4 posts
System Prompts vs. Transport Firewalls: Why System Prompts Do Not Equal Security
Discover why system prompts fail as a security boundary for AI agents, and how transport-level MCP proxies provide deterministic guardrails.
Bain Says Every Agentic Platform Needs a Policy Layer. We Built One.
Bain & Company's agentic AI architecture framework calls for centralised policy enforcement across MCP tool calls. PolicyLayer is the implementation.
Why Your Agent Shouldn't Know Its Own Spending Limits
An agent that knows its spending limit treats it as a budget to burn. Enforce quotas at the MCP gateway, where the agent never sees the rule.