MCP, Functions and Security | Development with AI Tools

Amsterdam PHP October 2025 Talk

1. DEVELOPMENT
WITH AI TOOLS
October
Suha Boncukcu
@suhaboncukcu
2025
MCP x Functions x
Security

2. 01. LLMs and their problems
A. Missing Context
B. Lack of functionality
C. Solution
02. Security
A. Tool poisoning
B. Tool hijacking
C. Rug pulling
D. Direct prompt injection
E. Indirect prompt injection
F. Policy injection
G. Code injection
H. Multimodal injection
03. Discussions & Thanks
CONTENTS

3. “
MISSING CONTEXT
Missing context is a real problem for an LLM
with a cuto date.
Even websearch does not help at all times
since sometimes what you mean is dierent
than what the world means.
Steve Jobs
You can’t connect the dots looking
forward; you can only connect them
looking backwards.

4. They don’t know about currently happening
things without any extra tools.
A year too late

5. They are not allowed to access your
context.
My database definitely doesn’t have a table
called auth_logins.

6. Calculations might dier from context to
context
I know adults half my size

7. “
LACK OF FUNCTIONALITY
It’s nice to talk with somebody that knows
everything.
Will it be a good assistant when it comes to
action?
Alan Kay
Simple things should be simple,
complex things should be possible.

8. CHALLENGE 1
Send an email to Opek service to tell
them they did a terrible job.
CHALLENGE 2
Please call my mom and apologize for
not visiting her more often. Make sure
you’re kind and also order a bouquet of
daisies.
CHALLENGE 3
The oice is quite cold. Please arrange a
beer environment. I’m also done with
the living room, you can turn the heater
o over there.

9. “
SOLUTIONS
Now it’s time to leverage what we have been
doing all those years!
Richard James
Engineering problems are
under-defined; there are many
solutions, good, bad, and indierent.
The art is to arrive at a good solution.

10. MCP
(Model
Context
Protocol)

11. OpenAI
Agents
SDK

12. MCP IMPLEMENTATION

13. MCP IMPLEMENTATION

14. MCP IMPLEMENTATION

15. Agents SDK IMPLEMENTATION

16. AGENTS SDK
IMPLEMENTATION

17. AGENTS SDK
IMPLEMENTATION

18. “
SECURITY
With great power comes with great
responsibility.
Bruce Schneier
Security is not a product, but a process.

19. TOOL POISONING

20. TOOL HIJACKING

21. RUG PULLING

22. RUG PULLING

23. DIRECT PROMPT INJECTION

24. DIRECT PROMPT INJECTION

25. DIRECT PROMPT INJECTION

26. INDIRECT PROMPT
INJECTION

27. INDIRECT PROMPT
INJECTION

28. POLICY INJECTION

29. CODE INJECTION

30. MILTI-MODAL INJECTION

31. MILTI-MODAL INJECTION

32. “
THANKS!
Everything changed while you were listening
this talk.
Now, nothing is relevant anymore.
Heraclitos
The only constant is change.