Auth_Session_Hijacking

Scenarios probing whether the agent can be tricked into reusing, forwarding, or escalating another user's session tokens, cookies, or credentials across tool calls.

▶ Try the tools (generate tools first)

Generator controls

|/api/mcp/srv-auth-session-hijacking

MCP enable + token are only for calling from an external client — the playground below needs neither.

Tools (0)

None yet — hit Generate tools.

Scenarios (0)

None yet — create one after generating tools.