kayalopez

## mcp-prompt-injection-launch-checklist.md

      
              1 file
            
          
              0 forks
            
          
                0 comments
              
            
              0 stars
            
          
                kayalopez
                / mcp-prompt-injection-launch-checklist.md
            
            
              Created
              May 23, 2026 02:23
            
              
                MCP prompt-injection launch checklist for AI agent builders
              
          
    MCP Prompt-Injection Launch Checklist

Use this before shipping a small AI agent, MCP server, browser agent, support workflow, or tool-calling demo to real users.
1. Map The Tool Surface


List every tool the agent can call.
Mark tools that read files, write files, send messages, open URLs, run commands, call APIs, update memory, access CRM/support data, or touch customer-visible state.
Separate read-only tools from tools that change state.
Remove any tool the first launch does not need.