We scanned 200 high-star MCP servers. 205 critical findings. Here are 4 novel attack classes.

MCP (Model Context Protocol) is the standard for connecting LLMs to external tools. It's growing fast — 3,199 public servers on GitHub and npm right now, 199 with over 1,000 stars. We built a static analyzer, cloned the top 20 Python repos, and ran it. Here's what we found. **Attack Class 1: Tool S