I Poisoned My Own MCP Server in 5 Minutes. Here's How.

MCP tool descriptions are untrusted input that LLMs obey blindly. I built a malicious server, tricked Claude into exfiltrating data, and then tried 3 evasion techniques. Here's the full attack chain.