Otto Support – An MCP, Agentic-AI Security Challenge

TL;DR

Bishop Fox built a vulnerable MCP-based customer support system where your AI assistant interacts with tools, services, and local resources, then challenges you to escalate access, exfiltrate data, and execute code. 

This hands-on CTF simulates real-world AI agent attack surfaces, requiring a mix of tool abuse, prompt manipulation, and source code analysis to uncover how modern MCP architectures fail in practice.…