MCP rug-pull detection

A tool can retain its name while changing the description or permissions that influence an agent.

Look beyond tool names

A description changing from read-only lookup to environment access is a different trust decision. DriftSeal records description and schema diffs separately from artifact and version changes.

Review before reapproving

A changed description is not proof of an attack. Review the old and new contract, capability indicators and affected paths. Pin the approved artifact or pause use until the change is understood.

What a clean result means

DriftSeal provides automated technical analysis and monitoring. It does not guarantee that software is secure. A clean DriftSeal result means only that no material issue or drift was detected by the active ruleset and coverage available during that scan.