benchmark-mcp-safety

test malicious tools, shadowing, and least privilege

the problem

an MCP server can hide unsafe instructions in tool descriptions or imitate a trusted tool.

what i built

mcp-safety places malicious and shadowed tools beside valid ones and checks what the agent calls and exposes.