Architecting Zero Trust for MCP: Mitigating Tool Poisoning, Sampling Injection, and Capability Forgery in Agentic Systems
Model Context Protocol (MCP) lacks cryptographic capability attestation. We analyze tool description poisoning, sampling hijacking, and zero-trust proxy design.