The Model Context Protocol security best practices page carries no section on tool schema change tool poisoning or rug pull attacks and its attack sections are all authorization shaped.

Checked 2026-09-05

Vendor
Model Context Protocol project
Product
Model Context Protocol
Subsystem
protocol
Deployment
not restricted
Region
not restricted
Release range
current as of 2026-09-05
Checked
2026-09-05

Sources

Cite this note

APA

WarmTransfer. (2026, September 5). Tool schema signature monitoring and drift handling: source note sigdrift-spec-security-page-no-drift-section. WarmTransfer. https://warmtransfer.net/knowledge/claims/sigdrift-spec-security-page-no-drift-section

BibTeX

@misc{warmtransfer-claim-sigdrift-spec-security-page-no-drift-section,
  title  = {Tool schema signature monitoring and drift handling: source note sigdrift-spec-security-page-no-drift-section},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/sigdrift-spec-security-page-no-drift-section},
  note   = {Source note sigdrift-spec-security-page-no-drift-section, checked 2026-09-05}
}

Read in context