---
id: 3828
title: "Otto Support – An MCP, Agentic-AI Security Challenge"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/otto-support-an-mcp-agentic-ai-security-challenge"
published_at: "2026-04-23 00:00"
tags: ["ai-security", "rce", "ctf", "mcp", "privilege-escalation", "ai-agents", "training", "otto-support"]
phying_url: "https://phying.com/item/3828"
lang: en
---

# Otto Support – An MCP, Agentic-AI Security Challenge

## Summary

Bishop Fox releases otto-support, a CTF around a vulnerable MCP customer-support server: a Go binary with 19 tools across four privilege levels, requiring escalation, data exfiltration, and RCE.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2026-04-23 00:00
- **Original:** https://bishopfox.com/blog/otto-support-an-mcp-agentic-ai-security-challenge
- **Phying News:** https://phying.com/item/3828