1. install VSCode, Docker 2. install VSCode Extensions *Dev ContainerS* 3. On the VSCode, `Ctrl shift p` and run `Dev Containers: Rebuild Containers`
Mcp tool poisoning attacks mcp server lets Claude, Cursor and other MCP clients work with MCP Tool Poisoning Attacks directly. 1. install VSCode, Docker 2. install VSCode Extensions Dev ContainerS 3. On the VSCode, Ctrl shift p and run Dev Containers: Rebuild Containers 4. create .env and add ANTHROPIC_API_KEY.
Ctrl shift p and run Dev Containers: Rebuild Containers 4. create .env and add ANTHROPIC_API_KEYOnce connected, the assistant can call this tool directly:
claude-3-5-haiku — 20241022Setup follows the standard MCP pattern: clone or install the server, then register it in your client's configuration file and restart the client. The configuration snippets on this page cover Claude Desktop, Claude Code and Cursor.
Before the server will start you need to supply one environment variable: ANTHROPIC_API_KEY. Keep credentials in your client's env block or a secrets manager rather than committing them.
Cloud and DevOps servers put infrastructure on speaking terms with your assistant, so "why is this broken?" is answered from real state rather than a generic checklist. MCP Tool Poisoning Attacks sits in that group, and the shape of its toolset — claude-3-5-haiku — tells you what it is really for. Worth comparing against the other cloud devops servers in this directory before you commit to one, since several overlap in scope but differ sharply in setup cost and permissions.
| Tool | What it does |
|---|---|
| claude-3-5-haiku | 20241022 |
{
"mcpServers": {
"ipinfo": {
"command": "/usr/local/bin/npx",
"args": [
"-y",
"github:RyosukeDTomita/mcp_tool_poisoning_attacks#main",
"ipinfo"
],
"env": {
"PATH": "/usr/local/bin:/usr/bin:/bin"
}
},
"burp": {
"url": "http://localhost:9876/sse"
}
}
}Configuration as documented by the project. Restart the client after saving.
| Variable | Description | Required |
|---|---|---|
| ANTHROPIC_API_KEY | Credential the server authenticates with. | Yes |
Manage your whole Supabase project in conversation — database, auth, storage, Edge Functions and branches.
Stop letting your assistant hallucinate n8n node parameters — this server hands it the real schemas, templates and validation.
AWS Labs' official server suite — current AWS docs, CDK guidance, cost analysis and service tools.
Cloud browsers for AI agents — automation sessions that run in Browserbase's fleet, not on your machine.
Workers, KV, R2 and D1 by conversation — Cloudflare's official remote servers for building and observability.
Dashboards, Prometheus and Loki queries, incidents and alerts — observability by conversation.