You vet a remote MCP server’s tools once, but the operator can rewrite those descriptions any time, and the new version lands in your agent’s context with no re-prompt. Covers what holds at the boundary.
A Remote MCP Server Can Rug Pull You
calendar_today
June 16, 2026
domain
zuplo