Agent tool-access attack chain and defenses

Agents act through tool-access layers like MCP servers, so every tool call is a potential entry point for attack. Attackers try to slip malicious or indirectly-injected commands past the approval gate that authorizes tool use. A trust registry is the counterweight: a vetted list of agents and tools that may be trusted before they are granted access.