Screenshots, PDFs, spreadsheets, slide decks, archives, and log files are not harmless attachments — they are agent-readable context that can carry stale, malicious, or sensitive information. This talk covers the security model for non-text artifacts in MCP: exact byte preservation with content-addressed storage and source hashes, view manifests that describe available representations without exposing raw files, size limits and format validation at upload, metadata extraction risks from OCR and text extraction, and why artifact provenance belongs in the same threat model as prompt injection. We show how a self-hosted MCP server serves image views, text extractions, table summaries, and metadata manifests from the same stored artifact, letting agents work with the content without direct file access.