mcpgawk launches MCP drift protection

MCP approvals are usually treated as permanent, making tool drift a serious supply-chain blind spot. mcpgawk adds a practical approval checkpoint, though coverage depends on whether an agent exposes a usable hook.

• –Detects changed tool descriptions, inputs, safety flags, and capabilities before execution
• –Prevents agents from approving their own changed tools
• –Local-first design keeps server inventories and verification results on the developer’s machine
• –Supports major coding agents including Claude Code, Cursor, Codex, Windsurf, Gemini CLI, and Kimi
• –Fifteen of 21 documented clients lack hook points, limiting protection without the paid gateway