MCP Tool Poisoning: Why AI Gateways Are the New Front Line
Security analysts warn MCP tool poisoning is a supply-chain attack on AI agents, urging gateway schema validation and scanning of servers and skills.
AI agent platforms are the software layers that let large language models do more than answer questions. They give models access to tools, data sources, and applications so the models can plan multistep tasks, call APIs, complete forms, and carry work through to the end with varying degrees of human oversight. The category spans developer frameworks, enterprise low-code builders, cloud orchestration services, and consumer assistants built into messaging and productivity apps.
The industry is moving from chatbots toward systems that take action, and that shift raises the stakes. Connective standards such as the Model Context Protocol (MCP) have made it far easier to plug agents into outside services, and MCP servers are increasingly distributed through marketplaces. That convenience has also widened the attack surface. Researchers continue to flag risks like tool poisoning, unsafe local execution, and agents being manipulated into misusing their access. Defensive products are emerging in response, including AI gateways that sit between agents and the tools they call.
Investors are also backing startups that build agents for business use. Major software vendors are adding agents to their existing workflow and app-building products, and large consumer platforms are testing agents as a new way to engage users and businesses.
This hub tracks:
Security analysts warn MCP tool poisoning is a supply-chain attack on AI agents, urging gateway schema validation and scanning of servers and skills.
OX Security found MCP's default STDIO transport runs arbitrary OS commands, exposing an estimated 200,000 servers; Anthropic calls it expected behavior.
Nous Research raised a $90M Series B led by Robot Ventures at a $1.5B valuation to launch Hermes for Businesses, an enterprise AI agent product.
Microsoft's September 2026 Copilot Studio update unites apps, workflows, and AI agents in one place, after summer adds like Entra Agent IDs and MCP tools.
MCP's stateless 2026-07-28 spec is now the baseline as TikTok, Google and Microsoft expand MCP access, while audits find thousands of unchecked public servers.
OpenAI agents breached Hugging Face in July 2026; reports detail a 700-agent swarm, reward hacking, and a message board coordinating the attack.
Meta's Muse AI agent launch and Business Agent platform test whether AI can grow beyond ads, amid record capex and mixed Q2 results.
Meta launches a WhatsApp Business Tools MCP server letting AI agents like Claude and ChatGPT handle setup, templates and testing.