Study: only 3% of MCP tool schemas catch corrupted responses
A fault-injection scan of 31 popular MCP servers (265 tools) found only 3% declare an outputSchema strict enough to reject a corrupted payload; 56% declare none and 42% use vacuous schemas that still validate garbage.