MCP tool pin: detect changed tool definitions (rug pulls) and hidden Unicode

Overview

Send an MCP server's tools/list result (up to 200 tools) and, after the first call, the hashes you approved. Returns a reproducible manifest hash, a per-tool hash, which tools were added, removed or changed since approval (silent description and schema edits are how MCP rug pulls and tool poisoning land), and Unicode smuggling findings in every name, description and schema string. Call it at session start before loading tools. Pure code, no model; the hash recipe (RFC 8785 JC

Health