Kedis ku xidhan hagaha · Adag Heerka

Kediska Sumowga Qalabka iyo Amniga MCP

Wuxuu tijaabiyaa sumowga qalabka, jiidashada roogagga iyo weerarrada ku-xigeenka ee wareersan ee MCP, oo lagu daray difaacyada sida qeexidda qeexidda iyo mudnaanta ugu yar.

Wadooyinka haga ee la xidhiidhaAmniga Mcp iyo Sumowga Qalabka
Su'aal 1 ee 8

Waa maxay qalab ku sumowga MCP?

Horudhac su'aal kasta8 su'aalo

Jawaabaha iyo sharraxaadaha waxay soo baxayaan markaad qaadanayso kediska.

  1. Waa maxay qalab ku sumowga MCP?
    • Overloading a server with requests
    • Hiding malicious instructions in a tool's description that the model follows
    • Corrupting a model's training data
    • Deleting a tool from a registry
  2. Waa maxay sababta sumowga qalabku inta badan aan loo arki karin isticmaalayaasha?
    • Interfaces often show only a short name, not the full description
    • Descriptions are encrypted
    • Models delete descriptions after reading them
    • MCP forbids showing descriptions
  3. Waa maxay roogagga MCP?
    • A server crashing during a call
    • A user revoking a token
    • A server changing its tool definitions after it was approved
    • A client downgrading the protocol version
  4. Xaaladdee ayaa ah weerar wareer-ku-xigeen?
    • A server returns malformed JSON
    • A model picks the wrong calendar tool
    • A user types a password into chat
    • Injected text in a public issue gets the agent to use its private repo access to leak data
  5. Waa maxay sababta rakibidda kaliya ee MCP server-yada sumcadda leh ugu filnayn?
    • Reputable servers are always slower
    • Injection can arrive through ordinary data returned by trustworthy tools
    • MCP blocks reputable servers
    • Reputation scores are not public
  6. What does hashing tool definitions at approval time let a client do?
    • Detect later changes and ask for re-approval
    • Speed up model inference
    • Compress tool output
    • Encrypt user prompts
  7. Which three conditions together make data theft especially likely?
    • Fast network, large model and many users
    • Open source, free tier and public registry
    • Private data access, exposure to untrusted content and a way to send data out
    • Long context, streaming and caching
  8. How does least privilege reduce MCP risk?
    • It stops prompt injection completely
    • Waxay ka dhigaysa sharraxaad gaaban
    • It removes the need for logging
    • It limits how much damage a compromised or tricked server can do