Can Your AI Be Tricked? Exposing the Security Gaps in MCP.