🛡 MCP-2OWASP-MCP

Cross-server prompt injection

A second MCP server's output reaches the agent's context and steers it. Mitigation: source-tag every tool result, refuse cross-server instructions.

Live signal on this risk

25

Ideas classified into this risk

25 submitted ideas

14

#1 (top) risk for

56% of matches

16

Dominant verdict tier

ALREADY EXISTS, YOU'RE LATE

3.2

Mean difficulty

out of 10

8

Avg competitor surface per idea

tools + integrations Claude found

0

Soonest predicted kill

Everyone. Simultaneously. (months until obsolete)

Ideas that flagged MCP-2

25 total

Mitigation pointer

A second MCP server's output reaches the agent's context and steers it. Mitigation: source-tag every tool result, refuse cross-server instructions.

← All 10 OWASP-MCP codes

Got an agent idea you want classified?

Roast My Problem