Definition
A vulnerability in MCP server implementations that allows an AI agent to exceed its authorized permissions and invoke database operations, file access, or tool invocations outside its designated scope. Scope enforcement is the primary access-control mechanism limiting agent actions.
Why it matters
MCP is the dominant protocol for connecting AI agents to enterprise tools and databases; bypassing scope enforcement allows agents to access unauthorized systems or data, turning permission boundaries into illusions.