{"serverId":"mcp-registry/work.agentexchange.tooldrift/monitor","tools":[{"name":"check_mcp_server","fixed":{"name":"check_mcp_server","description":"Check whether an MCP server's tools have changed since they were first recorded, and whether any tool description contains prompt-injection or data-exfiltration patterns. Call this BEFORE trusting a newly added or recently updated MCP server. Returns a verdict of clean or REVIEW_BEFORE_USE.","inputSchema":{"type":"object","properties":{"url":{"type":"string","description":"The MCP server's HTTP endpoint to probe live."},"server":{"type":"string","description":"Registry name of the server, if the URL is unknown."}}},"annotations":{"readOnlyHint":true}},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":157,"tokensAfter":157},{"name":"get_drift_feed","fixed":{"name":"get_drift_feed","description":"List MCP tools across the public ecosystem whose definitions recently changed, newest first. Use to see whether a dependency mutated.","inputSchema":{"type":"object","properties":{"limit":{"type":"integer","description":"Max rows, default 25."}}},"annotations":{"readOnlyHint":true}},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":80,"tokensAfter":80},{"name":"get_findings","fixed":{"name":"get_findings","description":"List tools whose descriptions contain detected injection, concealment, or exfiltration patterns. Filter by severity: critical, high, medium, low.","inputSchema":{"type":"object","properties":{"limit":{"type":"integer"},"severity":{"type":"string"}}},"annotations":{"readOnlyHint":true}},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":80,"tokensAfter":80}],"toolsChanged":3,"tokensSaved":0,"todo":[{"tool":"get_findings","params":["limit","severity"]}],"note":"Deterministic fixes. Changes marked verify need a human look before shipping (renames, inferred annotations, inferred types, removed text). Parameter descriptions in `todo` need to be written by someone who knows the API."}