OASB
Attacks/Fake Tool Detection/FAKETOOL-008
HIGHCWE-400

FAKETOOL-008 Batch Tool Flooding

Fake Tool Detection: MCP tool impersonation, shadow tool injection, and tool name squatting attacks

Description

Registers many fake tools at once to overwhelm tool discovery and increase the chance the agent selects a malicious tool

Remediation

Rate-limit tool registration. Set a maximum tool count per server. Detect and block mass registration of tools with similar descriptions. Require human approval for batch registration.

Severity

HIGH

OASB Control

6.2

CWE

CWE-400