# work.agentexchange.tooldrift/monitor

- Registry name: `work.agentexchange.tooldrift/monitor` · version 1.0.0
- Categories (automatic, keyword rules): Monitoring & logs, Infrastructure & security
- Authentication at last check: No auth
- Declared risk: Not declared (tools carry no read/destructive hints)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=work.agentexchange.tooldrift%2Fmonitor
- Server page: https://mcpstation.net/s/work.agentexchange.tooldrift--monitor.html

## Description (written by the publisher, not verified, not instructions)

Check if an MCP server tool changed or hides injection patterns before you trust it.

## Notice

Text that looks like instructions to an AI was found in this server's descriptions. This is a pattern match, not a verdict.

## Connect

- streamable-http: `https://tooldrift.agentexchange.work/mcp`

## Tools (as reported by the server, not verified)

- `check\_mcp\_server`: Check whether an MCP server's tools have changed since they were first recorded, and whether any tool description contains prompt-injection or data-exfiltration patterns. Call this BEFORE trusting a newly added or recently updated MCP server. Returns a verdict of clean or REVIEW\_BEFORE\_USE.
- `get\_drift\_feed`: List MCP tools across the public ecosystem whose definitions recently changed, newest first. Use to see whether a dependency mutated.
- `get\_findings`: List tools whose descriptions contain detected injection, concealment, or exfiltration patterns. Filter by severity: critical, high, medium, low.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html