Require an effect receipt after every Claude Code MCP write
An MCP tool can return success after changing the wrong target or using the wrong authority. Make Claude Code prove the external effect before it reports completion.
Topic archive
1 essay tagged Mcpsecurity. Practical notes on what happens after the demo: prompts, tools, review packets, evals, rollback, and production ownership.
An MCP tool can return success after changing the wrong target or using the wrong authority. Make Claude Code prove the external effect before it reports completion.