Unverified50% confidenceFactExact time
User-installed plugins were previously able to overwrite the description of organization-managed MCP server login tools; this unauthorized behavior is now prohibited.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/3/2026
First Seen
Valid until: 1/1/2027
Sources
Related Entities
Related Claims
UnverifiedThe tool has a built-in function for pinning MCP tool definitions, and issues a warning when a connected MCP server subsequently modifies its tool definitions.76% similarUnverifiedallowedMcpServers now only controls servers added by users themselves; managed servers are loaded by default, and disabling managed servers requires using deniedMcpServers instead.75% similarUnverifiedClients and servers written against the old MCP specification will be unable to communicate normally with the new specification, and code paths that rely on session state, handshake flows, or stream resumability may break.71% similarUnverifiedHaving an Agent bypass the MCP server and access the API directly is essentially reverting the authorization framework to the primitive and dangerous practice of placing long-lived keys in a shell70% similarUnverifiedBefore returning the agent session, run extension must be manually called to forcibly trigger the session start event; otherwise, pi-mcp-adapter will not initialize the MCP server and will report an 'MCP server not initialized' error.69% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/971051API
curl https://kongchang.com/api/v1/knowledge/claims/971051MCP
get_claim(id=971051)