MCP tool poisoning: approving a server once isn't approving it forever
MCP tool poisoning hides inside a server's tool descriptions. How the rug pull variant works, and a hash check that catches when a trusted tool quietly changes.
How I deleted 120 Obsidian markdown files and moved all internal docs into a local pgvector RAG system, with a rag_save MCP tool for direct ingestion.
How I built a local multimodal RAG with pgvector, Gemini embeddings, and an MCP server so Claude Code can search past sessions and internal docs on demand.
Claude Code ecosystem growing fast, MCP security under scrutiny, multi-agent orchestration going mainstream. Weekly roundup of what caught my eye.