MCP Security Hunting

Hunt vulnerabilities in Model Context Protocol (MCP) implementations — the standard protocol that lets AI applications connect to external tools (databases, APIs, files, web services). MCP introduces a unique attack surface where AI agents become the attack vector and tool responses become the delivery mechanism. Tools exposed without access control, unsanitized input handling, and over-trusted tool outputs enable privilege escalation, data exfiltration, and system compromise through the AI itself.

When to Use

• Target deploys AI agents with MCP tool access (Claude Desktop MCP, Cursor AI tools, custom agent frameworks).
• AI agent can invoke tools (database queries, file operations, API calls, web searches).
• Tool registration, schema validation, or access control logic is present.
• Need to test whether tool outputs can inject prompts back into the agent.
• Target uses RAG (Retrieval Augmented Generation) with external data sources.

Quick Detection

# Check if MCP server is exposed on common ports
curl --max-time 30 --connect-timeout 10 -sk "https://target.com/mcp/" -w "%{http_code}\n" -o /dev/null
curl --max-time 30 --connect-timeout 10 -sk "https://target.com/.well-known/mcp" -w "%{http_code}\n" -o /dev/null