Discussion: I’ve been building MCP servers lately, and I realized how easily cross-tool hijacking can happen

Saw an interesting discussion on r/MCP about this — wanted to bring it here. **Original topic:** I’ve been building MCP servers lately, and I realized how easily cross-tool hijacking can happen > I’ve been diving deep into the MCP to give my AI agents more autonomy. It’s a game-changer, but after some testing, I found a specific security loophole that’s honestly a bit chilling: Cross-Tool Hijacking. The logic is simple but dangerous: because an LLM pulls all available tool descriptions into... What are your thoughts? Has anyone here dealt with MCP server? --- *Discuss more at [0n MCP](https://www.0nmcp.com) — the hub for [agentic AI orchestration](https://www.0nmcp.com).*