Building, attacking and securing MCP servers

One tool, one prompt injection, three security boundaries. 26 slides from the Agentic AI Meetup: build a minimal MCP tool, attack it through untrusted tool data, then secure it with a server-side policy. With a live demo, a defense-in-depth table, and four executable tests that define what “secure” actually means. (Slide content in German.)