Agentic AI Defense: Decode-Time Provenance Binding for MCP

Eric Yocam, Varghese Vaidyan, Paris Kalathas +3

Agentic AI systems using the Model Context Protocol (MCP) are vulnerable to indirect prompt injection through untrusted tool outputs. We demonstrate cross-modal trust laundering, i…