Securing the Lethal Trifecta: How MCP Data Flow Attacks Leak Private Data

The "lethal trifecta" framework identifies critical security vulnerabilities in Model Context Protocol (MCP) agents, where the combination of exposure to untrusted content, access to private data, and external communication capabilities enables data exfiltration. Malicious actors can exploit this by sending calendar invites containing jailbreak prompts, which compromise agents and allow them to siphon sensitive information like financial records or API keys without user intervention. To mitigate these risks, Open Edison functions as an open-source MCP gateway that monitors agentic sessions in real-time. By tracking tool calls and context window contents, this firewall identifies and blocks dangerous sequences of actions, providing a layer of security that prevents unauthorized data transfers while maintaining agent functionality. Eito Miyamura, founder of Edison.watch, presents this architecture as a necessary safeguard for enterprises and individuals integrating agentic AI into their daily workflows.