mcp
AI security interview questions tagged mcp, across every topic.
8 questions · 1 unlocked for you
Concepts behind "mcp"
Explanations of the mechanisms these questions rely on.
Foundational
MCP SecurityMCP connects an AI application to servers offering tools, resources and prompts. Review what the host puts into model context, what local processes can reach, and which identities and permissions govern remote calls. Metadata approval, transport authentication and authorization of a concrete operation are separate controls. Agent & MCP Security
Foundational
Agent and MCP Gateways ExplainedAn agent or MCP gateway sits between agent runtimes and the tools or MCP servers they call. Because each call passes through it, it can authenticate the agent, apply default-deny policy to the tool name and arguments, swap in a credential issued for that tool, pin approved tool definitions, enforce budgets, route high-impact calls for approval and log every decision. It cannot control traffic that does not pass through it, cannot tell whether an allowed call serves the user's goal, and cannot clean instructions out of the data it relays. It works only alongside per-agent identity, sandboxing, egress control and authorisation inside the tools. Agent & MCP Security
Core
Tool Poisoning and Rug PullsA server can place unwanted instructions in the tool metadata a host exposes to its model. Changed definitions can invalidate an earlier review, and one tool description can influence calls to another server. Review definition revisions before use, confine implementations and authorize each consequential action independently; a matching metadata hash does not prove unchanged behavior. Agent & MCP SecuritySign in