mcp-security use cases: 2 examples

github2026-10-17MCP-securitycontract-drift

RugSnare: pin MCP tool contracts and catch silent drift

Show HN (Oct 17): RugSnare pins each MCP tool's {name, description, inputSchema} by canonicalized SHA-256 at install, then diffs upgrades across 24 popular servers (~3.6M weekly installs)—336 contract changes found; grades BREAKING/LOOSENED/EXPANDED/NOTATION/COSMETIC and exits 1 for CI. Apache-2.0, zero npm deps; OWASP MCP Security Cheat Sheet now recommends contract pinning.

RugSnare MCP Claude Code+2

Source ↗

x2026-10-16agent-governancepretooluse-hooks

Prismor: self-hosted runtime control plane for coding agents

OSS hooks intercept tool calls before execution across ~14 coding agents; observe/enforce policy, secret cloaking, MCP/skill scan, egress allowlists, and a local dashboard.

Prismor Claude Code Cursor+4

Source ↗