← All articles

Reading-path month: May 2026. Collection published on September 12, 2026. Months organize the reading path; they are not earlier publication dates.

MCP: tool changes are trust changes

An agent's tool catalog needs governance.

AI Security

Content produced with AI assistance for Thiago Silva’s website. Independent editorial analysis; it does not represent clients or employers.

Reading context

A short architecture article. The technical reference supports the topic; hypothetical scenarios and assessment proposals are editorial analysis, not accounts of personal implementations.

Original source ↗

The architecture decision

Connecting a tool server changes what an agent can do. Later catalog changes can alter that capability without changing the model.

Practical application

Editorial proposal: record origin, purpose and operations for each accepted tool. In a hypothetical integration, distinguish file reading from record modification. Define how the team detects behavior or scope changes.

How to verify

Exercise tool removal and parameter changes in testing. Check that agents and controls remain consistent with approved configuration. Aim for a reviewable capability inventory with owners and an update procedure.

Sources

  1. OWASP — MCP Security Cheat Sheet