#tool-responses

You Secured Your Agent's Tool Calls. Nobody Secured the Answers.

MCP validates what agents send to tools but not what tools send back. That's where the exploit will come from.