MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers
QuestionCan poisoned tool metadata redirect agents even without invoking the poisoned tool?
Source summaryo1-mini’s reported attack success was 72.8%.
NUWA research note · independent review pending · Contains: question / method / findings / interpretation / limits