---
id: 1406
title: "How MCP servers can steal your conversation history"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2025/04/23/how-mcp-servers-can-steal-your-conversation-history/"
published_at: "2025-04-23 14:30"
tags: ["mcp", "prompt-injection", "llm-security", "ai-agents", "data-exfiltration", "trail-of-bits"]
phying_url: "https://phying.com/item/1406"
lang: en
---

# How MCP servers can steal your conversation history

## Summary

Malicious MCP servers can inject trigger phrases into tool descriptions to exfiltrate entire conversation histories and steal sensitive credentials and IP.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2025-04-23 14:30
- **Original:** https://blog.trailofbits.com/2025/04/23/how-mcp-servers-can-steal-your-conversation-history/
- **Phying News:** https://phying.com/item/1406