Paper 008·Agent Security·July 2025

ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by Using OAuth-Enhanced Tool Definitions and Policy-Based Access Control

M. Bhatt, V. S. Narajala, I. Habler · 6 pages

Abstract

Mitigates tool squatting and rug pull attacks in the Model Context Protocol (MCP) by hardening tool definitions with OAuth-enhanced signatures and policy-based access control, preventing malicious or mutated tools from being silently substituted into agent workflows.

Research record

This page summarizes the public research record and links to the authoritative paper source. Propose a replication or report a discrepancy to b1oo@shrewdsecurity.io.