The Model Context Protocol (MCP) is gaining rapid adoption as a plug-and-play standard for giving AI agents direct access to databases, filesystems, and internal APIs. However, because it relies on unauthenticated local transport pipes (like stdio), it completely bypasses traditional security perimeters. This architecture leaves enterprises highly vulnerable to indirect prompt injection attacks where an agent processing a malicious email or document can be tricked into running destructive system...