Story
arxiv_cs_ai · Nov 4, 2026 · paper
arxiv.orgNov 4, 2026
original source linked
In brief
AI agents rely on third-party tools, such as Model Context Protocol (MCP) servers, whose publishers can be authenticated and whose execution can be restricted by runtime security policies. Yet authenticity does not guarantee benign behaviour: a legitimately signed tool may perfor