> ## Documentation Index
> Fetch the complete documentation index at: https://docs.flintai.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Untrusted external tool

> Agent dynamically loads tools, MCP servers, or plugins without signature or registry verification

Agent dynamically loads tools, MCP servers, or plugins without signature or registry verification

## How to resolve

Source tools and MCP servers from trusted registries only. Verify signatures and scan code/dependencies before deployment. Proxy agent requests through a gateway.

## Risk

**Governance/Compliance**

This vulnerability falls under [ASI04:2026 — Agentic Supply Chain Vulnerabilities](https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/) in the OWASP Top 10 for Agentic Applications. Compromised runtime components — tools, plugins, MCP servers, deps — alter agent behavior.

**Security**

Agent dynamically loads tools, MCP servers, or plugins without signature or registry verification. If exploited, this can compromise the agent's integrity, confidentiality, or availability, potentially affecting downstream systems and data.

## Explanation

Agent dynamically loads tools, MCP servers, or plugins without signature or registry verification. This falls under ASI04 (Agentic Supply Chain Vulnerabilities): Compromised runtime components — tools, plugins, MCP servers, deps — alter agent behavior.

## Specifications

**Trigger**

* Agent scan detects agent dynamically loads tools, MCP servers, or plugins without signature or registry verification

The scanner looks for patterns such as:

* MCP server URL loaded from config without pinning
* dynamic tool import without hash verification
* third-party plugin loaded without signed manifest

**Severity**

* HIGH

**Applies to**: Agent