Canary tools expose why agents choose the wrong capability
Researchers planted six diagnostic decoy types in MCP tool sets and ran 8,640 primary trials; susceptibility varied about 36-fold across models, did not follow capability tier consistently, and correlated with task failure.
Why it matters: Aggregate tool-call accuracy hides whether an agent understands prerequisites, capability limits, timing, granularity, parameters, and semantic fit.