Skip to main content
Agent dynamically loads tools, MCP servers, or plugins without signature or registry verification

​
How to resolve

Source tools and MCP servers from trusted registries only. Verify signatures and scan code/dependencies before deployment. Proxy agent requests through a gateway.

​
Risk

Governance/Compliance This vulnerability falls under ASI04:2026 — Agentic Supply Chain Vulnerabilities in the OWASP Top 10 for Agentic Applications. Compromised runtime components — tools, plugins, MCP servers, deps — alter agent behavior. Security Agent dynamically loads tools, MCP servers, or plugins without signature or registry verification. If exploited, this can compromise the agent’s integrity, confidentiality, or availability, potentially affecting downstream systems and data.

​
Explanation

Agent dynamically loads tools, MCP servers, or plugins without signature or registry verification. This falls under ASI04 (Agentic Supply Chain Vulnerabilities): Compromised runtime components — tools, plugins, MCP servers, deps — alter agent behavior.

​
Specifications

Trigger
  • Agent scan detects agent dynamically loads tools, MCP servers, or plugins without signature or registry verification
The scanner looks for patterns such as:
  • MCP server URL loaded from config without pinning
  • dynamic tool import without hash verification
  • third-party plugin loaded without signed manifest
Severity
  • HIGH
Applies to: Agent