Unverified50% confidenceSolutionExact time
mcpgawk sits on the invocation path and rejects related calls when tool descriptions or permissions change, until the user personally confirms the change.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/6/2026
First Seen
Valid until: 1/4/2027
Sources
Related Entities
Related Claims
Unverifiedmcpgawk is designed to ensure that agents cannot bypass the checkpoint to approve their own changes, specifically targeting prompt injection attack scenarios.75% similarUnverifiedMCP servers can silently change their tool behavior after being approved, and agents will continue to invoke the new version without the user's knowledge.75% similarUnverifiedMCP规范要求主机在运行任何工具之前必须先询问用户确认，强制保留人工介入环节69% similarUnverifiedClients and servers written against the old MCP specification will be unable to communicate normally with the new specification, and code paths that rely on session state, handshake flows, or stream resumability may break.68% similarUnverified当某个MCP工具未被正确触发时，暂时关闭其他MCP工具减少干扰后重新运行，往往能帮助模型识别到正确的工具67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/980795API
curl https://kongchang.com/api/v1/knowledge/claims/980795MCP
get_claim(id=980795)