work.agentexchange.tooldrift/monitor

Official3 tools

by tooldrift

Check if an MCP server tool changed or hides injection patterns before you trust it.

The work.agentexchange.tooldrift/monitor MCP server checks whether an MCP server tool changed or hides injection patterns before you trust it. It provides a set of monitoring capabilities (3 tools total) intended to help assess tool behavior with respect to injection-related patterns.

🛠️ Key Features

Monitors whether an MCP server tool changed
Checks for injection patterns
Flags potential hidden injection behavior

🚀 Use Cases

Pre-trust review of MCP server tools
Detecting changes that may affect tool behavior
Assessing whether injection patterns are concealed

⚡ Developer Benefits

Adds a verification step before relying on a tool
Helps maintain confidence in tool behavior across updates
Supports evaluating security-relevant injection pattern changes

⚠️ Limitations

Limited to monitoring injection patterns and tool changes; it does not describe other verification areas.

Captured live from the server via tools/list.

check_mcp_server

Check whether an MCP server's tools have changed since they were first recorded, and whether any tool description contains prompt-injection or data-exfiltration patterns. Call this BEFORE trusting a newly added or recently updated MCP server. Returns a verdict of clean or REVIEW_BEFORE_USE.

Parameters2

url	string	optional	The MCP server's HTTP endpoint to probe live.
server	string	optional	Registry name of the server, if the URL is unknown.

Raw schema

{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "The MCP server's HTTP endpoint to probe live."
    },
    "server": {
      "type": "string",
      "description": "Registry name of the server, if the URL is unknown."
    }
  }
}

get_drift_feed

List MCP tools across the public ecosystem whose definitions recently changed, newest first. Use to see whether a dependency mutated.

Parameters1

limit

integer

optional

Max rows, default 25.

Raw schema

{
  "type": "object",
  "properties": {
    "limit": {
      "type": "integer",
      "description": "Max rows, default 25."
    }
  }
}

get_findings

List tools whose descriptions contain detected injection, concealment, or exfiltration patterns. Filter by severity: critical, high, medium, low.

Parameters2

severity	string	optional
limit	integer	optional

Raw schema

{
  "type": "object",
  "properties": {
    "severity": {
      "type": "string"
    },
    "limit": {
      "type": "integer"
    }
  }
}

Install

Tools (3)

check_mcp_serverget_drift_feedget_findings

Remote endpoint

Streamable HTTP

Hosted server - connect over the network, no local install.

url

https://tooldrift.agentexchange.work/mcp

Add to VS Code Add to Cursor

claude_desktop_config.json

json

{
  "mcpServers": {
    "monitor": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://tooldrift.agentexchange.work/mcp"
      ]
    }
  }
}

Desktop config is stdio-only; this bridges via mcp-remote. Native remote: Settings > Connectors.

🛠️ Key Features

🚀 Use Cases

⚡ Developer Benefits

⚠️ Limitations

check_mcp_server

get_drift_feed

get_findings

Install

Remote endpoint

Related servers