Turns out you can trigger tool calling in MCPs by writing an instruction inside a resource. A Reddit user wrote an instruction inside a PDF resource that modifies the recipient number in a WhatsApp MCP tool call, and it works. Be careful using an untrusted resource and tool at the same time.

9 likes 0 replies