Glossary · Phase 9 · Model Context Protocol
Typosquatting
Publishing a malicious package under a name one letter off a popular one, hoping people install it by mistake.
Try it now
All tool definitions and results are untrusted input.
Learn it properly
MCP security · Tool poisoning, rug pulls, confused deputies and local-server risks. About 40 minutes.
Other terms from the same lesson
- rug pull: A server quietly changing its tools after you approved them. Pinning a fingerprint of each tool catches it.
- tool poisoning: Hiding instructions for the model inside a tool's description, often where the user can't see them.
Never trained an AI?
Teach a small one to write, right in your browser. It takes about 20 seconds and needs no account.