MCP clients fetch tool lists fresh each session. If a server changes a tool — new parameters, broader description, hidden text — the agent uses the new version without anyone re-approving it.
+Why it matters
Your approval was for a snapshot; your agents run on the live version.
+How Intertrace handles it
Each approved tool's definition is pinned by its hash and compared on every tool list and call. A changed tool keeps showing the agent its approved version, the first call to it asks a person to approve the new definition, and a change that carries hidden instructions is blocked.
+Keep reading
+ The AI watching your AI
See it on your own traffic.
Book a 30-minute risk assessment, or open the Simulation Lab and try it now.