MCP Tool Schema Poisoning: When the Framework Layer Authorizes the Attack

A researcher commits a legitimate MCP server definition to a shared repository. Teammates approve the...