mcp-auth-exploitation

Exploit MCP authorization flows — CIMD SSRF via client_manifest_uri/logo_uri/jwks_uri, Dynamic Client Registration abuse, token scope inflation in multi-agent chains, confused deputy attacks. Use when target exposes MCP authorization, OIDC Dynamic Client Registration (RFC 7591), or multi-agent token delegation.