OpenA2A counts 420 tool calls to its decoy MCP servers
OpenA2A's new security report counts 420 tool calls to its decoy Model Context Protocol servers, compared with nine in its previous reporting window. Those calls came from 19 fingerprints. The report is dated October 18 and says its measurement window closed at midnight UTC on October 19.
Verified 12:20 AM PDT · 2 original sources
These figures come from the research group's own observations, which HotTea has not independently reproduced. Traffic to decoy servers does not show the attack rate across production services. A fingerprint is not a verified person or agent, and a tool request does not prove that an intrusion succeeded.
Watch for independently checked event data and clear attribution. Reports should separate a connection, a request to use a tool and a completed action before calling the traffic an attack.
Audit the story
Original sources
Company claims remain company claims. Follow the reporting and judge the evidence directly.
- OpenA2A ResearchState of AI Agent Security: The Tool Calls Arrive ↗
- OpenA2A ResearchResearch methodology, checked October 19 ↗
Continue the edition