OASB
Attacks/MCP Exploitation/MCP-001
INFO

MCP-001 MCP Tool Enumeration

MCP Exploitation: Attempts to exploit MCP tool call parameters (path traversal, command injection, SSRF)

Description

Discovers available MCP tools via tools/list

Remediation

Limit tool visibility. Only expose tools the caller is authorized to use.

Severity

INFO

OASB Control

2.3