Cursor Agent Poisoning
Rank #84,301glama/Omprakash97/exploit-mcp
A proof-of-concept attack that exploits Model Context Protocol (MCP) tool registration to achieve persistent agent poisoning in AI assistants like Cursor, embedding malicious instructions that persist across chat contexts without requiring tool execution.
Cursor Agent Poisoning is a Model Context Protocol (MCP) server published by Omprakash97. It ranks #84,301 of 137,138 servers tracked on MCP Toplist. Cursor Agent Poisoning is listed on Glama, and ships as a single rolling release with no explicit version metadata. It was first listed on Jul 26, 2025.
Ranks ahead of 52,837 of 137,138 servers on MCP Toplist.
Use Cursor Agent Poisoning
No credentials or required configuration declared — add it to your MCP client and go.
This server doesn't publish a machine-readable install config — see the repository README for install instructions.
Show your rank
Maintain this server? Add the live rank badge to your README — it updates automatically as the leaderboard changes.
[](https://mcptoplist.com/server/glama%2FOmprakash97%2Fexploit-mcp)<a href="https://mcptoplist.com/server/glama%2FOmprakash97%2Fexploit-mcp"><img src="https://mcptoplist.com/badge/glama%2FOmprakash97%2Fexploit-mcp.svg" alt="MCP Toplist: #84,301 of 137,138" /></a>Variants: append ?metric=score or ?metric=stars to the image URL.
Listed on 1 registry
Omprakash97
Not versioned
This server is published through a registry that does not expose explicit version metadata, and no GitHub release tags were found on the linked repository. The listing tracks a single rolling release.
Frequently asked questions
- Who maintains Cursor Agent Poisoning?
- Cursor Agent Poisoning is maintained by Omprakash97, which publishes 1 MCP server (0 total versions) tracked on MCP Toplist.
- Is Cursor Agent Poisoning listed on the Official MCP Registry?
- Cursor Agent Poisoning is not on the Official MCP Registry. It is listed on Glama.
- How many versions does Cursor Agent Poisoning have?
- Cursor Agent Poisoning ships as a single rolling release with no explicit version metadata.
- Where can I find the source code for Cursor Agent Poisoning?
- The source code for Cursor Agent Poisoning is hosted at github.com/Omprakash97/exploit-mcp.
Do you run this server?
Community projects list the MCP servers behind real agents and apps. Publish yours and this page will link to it.