Every change Wellknown observed on this MCP server, newest first, with what it was before and what it became. Tool-surface changes carry the definition diff. Nothing here is edited after the fact.
Changed the definition of "check_mcp_server"
before
—after
Check an MCP server⟨55 unchanged words⟩ this server -- not that it is safe.Treat REVIEW as do-not-proceed-blindly: aA brand-new attacker-published serverlooksalsoexactlylooks likethis.this, so REVIEW calls for a look, not a pass. ALLOW is only returned when we actually resolved the server and scanned its dependency graph;checkknown_to_us and dep_graph.scanned confirm it. Suited toconfirm.aUsepre-flightthischeckBEFOREbeforeinvokingaanytoolotheron another MCP servertoolis used, especiallyones installedone from outside the official MCP Registry.
before
—after
{"openWorldHint":true,"readOnlyHint":true,"title":"Check an MCP server"}Changed the definition of "check_mcp_server"
{"additionalProperties":falsetrue,"properties":{"server":{"description":"REQUIRED.ExactThe server to judge: its exact MCP Registry name (e.g.io.github.owner/server-name, optionally @version). A bare name (server-name) is judged as typed, never mapped to a registry server, and the matching full names come back in input.did_you_mean. Also resolved, only when the identity is provable: a registry URL (https://registry.modelcontextprotocol.io/v0/servers/<name>) and a GitHub repo (\"owner/repo\" oritshttps://github.com/owner/repo)exactpublishedfinalby
Changed the definition of "check_mcp_server"
{"additionalProperties":false,"properties":{"server":{"description":"REQUIRED. Exact MCPserverRegistry name (e.g.io.github.foo/bario.github.owner/server-name), or its exact final segment (server-name). No substring or fuzzy matching: a name we cannot resolve to exactly one server returns REVIEW, never a guess.","minLength":1,"type":"string"},"tool":{" ⟨26 unchanged words⟩
Certificate changed, valid to 2027-01-02
Certificate recorded, valid to 2026-11-04
Authorization not required
First tool surface recorded: 1 tool (server version 1.0.0)
Showing the latest 7 events. The API returns up to 500 and filters by kind: ?kind=tool_surface_changed