Agentic AI Defense: Decode-Time Provenance Binding for MCP

Agentic AI systems using the Model Context Protocol MCP are vulnerable to indirect prompt injection through untrusted tool outputs. We demonstrate cross-modal trust laundering, in which instructions concealed in an email-signature image using least-significant-bit LSB, discrete cosine transform...