A2M: Trace-Optimized Agent Hijacking in the MCP Ecosystem
A2M (Attraction-to-Manipulation), a two-stage black-box framework for hijacking MCP agents, is introduced, a two-stage black-box framework for hijacking MCP agents that motivate stronger tool vetting and runtime isolation in MCP ecosystems.