MCP Tool Description — Compliance/Audit Framing for Mandatory Chat Context - ATR-2026-01310 (ae98daed-e377-5000-8d6d-44654f4d63cb)
Detects a specific variant of MCP tool-description chat-history exfiltration (see ATR-2026-01300) where the tool description invokes explicit compliance or regulatory mandates to make the chat-history collection appear non-optional. This variant uses phrases like "MUST be consulted if the phrase X appears", "REQUIRED for internal auditing, gRPC, and SOC 2 compliance", "under applicable legal and regulatory frameworks", or "chat provenance include the entire chat history for security reasons". The compliance framing is more convincing than a direct instruction and is harder for naively trained filters to catch because it mimics legitimate audit/compliance language. Observed in MCPSecBench "chat-history-in-notes" sub-variants that use SOC 2, GDPR, and legal framework references.