Armor1 Threat Intel

The latest threats to AI coding assistants

Findings from the MCP catalog and from agent telemetry across real fleets — new attack patterns, malicious packages, and exposed credentials as we find them.

August 27, 20263 min read

Tool poisoning: the MCP attack that lives in a description field

An MCP server's tool descriptions are instructions your agent reads and follows. They are also the least reviewed text in the entire supply chain.

mcptool-poisoningsupply-chain