Your MCP server changed last night. Your agent didn't notice.

TL;DR: An MCP server can change what its tools say after you approve it. Your agent reads the new description as instructions. Pattern-matching those descriptions misses things; checking "did this change since approval?" doesn't. Tool descriptions are prompts When Claude Code, Cursor or Codex connects to an MCP server, it calls tools/list and puts... Weiterlesen