MCP enabled software gives you a list of options. If you check the Gmail one and the shell one you are instantly vulnerable to this kind of attack.