MCP tool poisoning: approving a server once isn't approving it forever
MCP tool poisoning hides inside a server's tool descriptions. How the rug pull variant works, and a hash check that catches when a trusted tool quietly changes.
Running 5 parallel research agents to audit my Claude Code workbench: what the latest AI engineering research says, what I already had, and what was actually new.
Claude Code ecosystem growing fast, MCP security under scrutiny, multi-agent orchestration going mainstream. Weekly roundup of what caught my eye.