Free Trial Dark Web Report

8. Token Theft via Man-in-the-MCP

Home / Security: Threats, Risks, and Controls / Top 10 Known Attack Scenarios and Mitigations / 8. Token Theft via Man-in-the-MCP

Published on • Updated on

8. Token Theft via Man-in-the-MCP

Attack: Attacker intercepts or impersonates a legitimate MCP server and collects API keys or user auth tokens passed during task execution.

Mitigation:

  • Always serve MCPs over HTTPS
  • Use mTLS or mutual token verification
  • Never embed secrets in plain JSON, use vault injection
ON THIS PAGE