This Internet-Draft usefully puts names on MCP failure modes like SSRF through URL-fetching tools, filesystem overreach, lifecycle bypass, and prompt-injection-fed tool calls. It is still a June 2026 individual draft, and even its scanner validation is described against controlled fixtures, so treat it as a checklist and research prompt rather than settled standards text.