Unverified50% confidenceSolutionExact time
在 MCP 部署阶段应为所有包添加数字签名，第三方安装工具校验哈希以防安装程序篡改
1
Sources
50%
Confidence
Long-term
Relevance
8/24/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedMCP Server 可以暴露工具（Tools）、资源（Resources）和提示词模板（Prompts）三类能力67% similarUnverifiedWhen an MCP tool is used for the first time, Gemini CLI will request permission confirmation, which is part of the MCP protocol's security design67% similarUnverifiedMCP currently remains focused on standardizing tool discovery and invocation formats, while fine-grained permission management control has not yet been incorporated into the core protocol constraints.66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/793855API
curl https://kongchang.com/api/v1/knowledge/claims/793855MCP
get_claim(id=793855)