RugSnare: pin MCP tool contracts and catch silent drift
Show HN (Oct 17): RugSnare pins each MCP tool's {name, description, inputSchema} by canonicalized SHA-256 at install, then diffs upgrades across 24 popular servers (~3.6M weekly installs)—336 contract changes found; grades BREAKING/LOOSENED/EXPANDED/NOTATION/COSMETIC and exits 1 for CI. Apache-2.0, zero npm deps; OWASP MCP Security Cheat Sheet now recommends contract pinning.
Save ideas in this browser. Upvotes count across the board.
Local-first OSS DB/workspace where Claude Code/Codex/Cursor share durable records, docs, skills, and apps—writes that matter go through human review; Skill, MCP, OpenAPI, and ACP connections keep agents stateless and work durable.
Local-first Apache-2.0 CLI for Claude Code/Codex/Cursor: mcp-xray ranks bloated tool schemas, sync compresses CLAUDE.md↔AGENTS.md↔Cursor rules, and shield fails CI on leaked keys/prompt-injection/Trojan Unicode—claims large cuts in model-visible prompt size without API calls.
Read-only CLI that inventories env/CLI/.env/MCP/SSH/cloud logins an agent inherits on laptop, sandbox, or CI—and flags risky agent steps in GitHub Actions—without printing secret values.
MCP-connected runtime QA maps critical flows and entry points, then re-tests the blast radius of each Claude Code/Cursor/Codex change against live Postgres/Kafka/APIs/MCP tools—contracts, authz, OWASP, errors—before merge, with self-heal when behavior changes on purpose.