Spot the rug pull.
You approved these AI tools once. Your agent re-reads them every session. Some of them have changed since. You get 8 seconds per tool.
7 tools8 seconds eachabout a minuterunning out of time counts as Keep
In MCP, you approve a tool once and your AI agent reads its description as instructions at the start of every session. On the left: what you approved. On the right: what it says today. Every tool here is invented. No real server is named or implied.
1 / 7
Keep using tool, or block it?
You approvedMarch
It says todaySeptember
Keyboard: K to keep, B to block
You
mcp-pin
6 of 6 changes flagged
In under a millisecond, including the two harmless ones, and silent on the tool that did not change. It never decides which change is evil. It stops the session and shows you the diff, so the decision is yours instead of a guess made in 8 seconds.
See the real thing block a changed tool, in about ten seconds:
npx --yes mcp-pin@0.1.4 demo