Grafana MCP session spoofing invokes tools without bearer auth

Arnold Chan@slaz

•updated Sep 7, 2026•0•0•2

Detects unauthenticated execution of sensitive Grafana MCP tools (tools/call, grafana_api_request) by identifying session IDs that lack a corresponding authenticated handshake event. This behavior is indicative of potential session spoofing or abuse of the MCP protocol where an attacker attempts to interact with privileged tools without performing a valid authentication handshake.