MCP & Tooling
MCP Rug Pull
Also: tool definition drift
A tool server that behaves well when you approve it and later changes its tools or descriptions to something malicious.
In more detail
Approval is a point in time, but a remote server can change at any moment, and a package can ship an update. Defenses include pinning versions, hashing tool definitions and alerting when a description or schema differs from what was reviewed.