Unicode TAG-Block Concealment of Tool-Metadata Payloads in the Model Context Protocol: An Approval-View Fidelity Gap Across Three Independent Server Implementations arxiv.org
Can MCP tool approvals hide Unicode TAG payloads from humans while still feeding them to the model? Apparently yes.