Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-07-09 · source-backed
July MCP roundups documented Mid-Session Tool Injection against WebMCP agents, using threshold poisoning and fabricated diagnostic events to swap or re-scope tools after a session is already established. The uncomfortable implication: a context provider you trusted at connect time can turn hostile at message 40. Per-response output validation and zero-trust boundaries between an agent and its tool servers aren't paranoia anymore, they're the baseline. Trust at handshake is not trust for the session.
Each link below shares sources, entities, or timing with this story.
Microsoft supports MCP / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Microsoft supports MCP); both cover Attackers, MCP; overlapping topics (against, agent, already, tool).
OpenAI supports MCP / Shared entity: MCP / Same source / Shared topic / What happened next
Linked by a graph relationship (OpenAI supports MCP); both cover MCP; cite the same source (Mid-Session Tool Injection).
Cloudflare supports MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Cloudflare supports MCP); both cover MCP, WebMCP; overlapping topics (agent, already, tool).
OpenAI supports MCP / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (OpenAI supports MCP); both cover MCP, WebMCP; overlapping topics (agent, tool).
ChatGPT supports MCP / Shared entity: MCP / Shared topic / What happened next / Tension
Linked by a graph relationship (ChatGPT supports MCP); both cover MCP; overlapping topics (against, agent, session, tool).
Adversa AI criticizes MCP / Shared entity: MCP / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Adversa AI criticizes MCP); both cover MCP; reported by the same outlet (adversa.ai).
Claude Code uses MCP / Shared entity: MCP / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses MCP); both cover MCP; overlapping topics (against, agent, between, context, session).
Claude Code uses MCP / Shared entity: MCP / Shared topic / What happened next / Tension
Linked by a graph relationship (Claude Code uses MCP); both cover MCP; overlapping topics (against, agent, tool).