Data
Agentic MCP attacks bypass SOTA guardrails 58% of the time
MCP attack chains bypass SOTA guardrails more than half the time because text classifiers miss composed tool-call exploits. The agentic safety gap is architectural, not a tuning problem.