My Credentials, Please: Detecting Filesystem Capability Laundering in MCP Servers at Scale

Zeqian Huang, Mingyue Tang, Aonan Guan +2

The Model Context Protocol (MCP) standardizes how AI agents invoke external tools. MCP servers expose tools through a declared contract consisting of a name, description, and argum…