domains / families / security / hunt-mcp-security

hunt-mcp-security

separate

Hunt Model Context Protocol (MCP) vulnerabilities in AI-tool integration systems.

When to use

• Target deploys AI agents with MCP tool access (Claude Desktop MCP, Cursor AI tools, custom agent frameworks).
• AI agent can invoke tools (database queries, file operations, API calls, web searches).
• Tool registration, schema validation, or access control logic is present.
• Need to test whether tool outputs can inject prompts back into the agent.
• Target uses RAG (Retrieval Augmented Generation) with external data sources.

Skill page

Source