The evidence behind the guides

Sources

Find a study, check what it supports, and follow it back to a concern.

Sources for Confused-deputy attacks

3 sources

Guide citations are still under editorial review.

Model Context Protocol maintainers · July 2026 documentation Official technical guidance

Security Best Practices (original source, new tab)

Explains confused-deputy and token-passthrough risks in MCP implementations; not proof that every connected agent has these defects.

Sources retain their original publishers’ rights. Inclusion does not imply endorsement. Saved sources stay in this browser on this device. Dates and source descriptions come from the existing editorial records.