Monitor

work.agentexchange.tooldriftPublished by tooldrift.agentexchange.workOfficial publisherv1.0.0Updated Oct 24, 2026

Check if an MCP server tool changed or hides injection patterns before you trust it.

VerifiedStreamable HTTPWeb executableSecurity & Monitoring

Overview

AI-generated overview

A remote MCP service that checks whether an MCP server's tools have changed or hide injection patterns before you trust them.

What you can do
Monitor is a remote MCP endpoint whose stated purpose is to check whether an MCP server tool has changed or hides injection patterns before you trust it. The registry description gives only this single capability, and no tool list, README, or documentation is provided, so the exact tools, inputs, and outputs are not described. It is reached over streamable HTTP at a hosted endpoint rather than run locally.
When to use it
Consider it if you want an assistant to vet MCP servers or their tools for changes or suspected prompt-injection patterns before you rely on them. Because no tool list or documentation is published, verify what it actually returns before depending on it in a workflow.
Requirements
A remote streamable HTTP endpoint; no packages, environment variables, or headers are declared, and no authentication is declared. Network access to the hosted endpoint is required.
Before you install
The manifest declares no authentication, so consider what data you send to a third-party hosted endpoint. The service inspects other MCP servers and their tool definitions, which may include sensitive configuration or prompts; only submit material you are comfortable sharing. No tool list or documentation is published, so its behavior cannot be verified from the registry entry alone.

Installation

In SourceWeft

  1. Open Monitor in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/work.agentexchange.tooldrift%2Fmonitor/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "monitor": {
      "type": "http",
      "url": "https://tooldrift.agentexchange.work/mcp"
    }
  }
}

Tools

3

check_mcp_server

Check whether an MCP server's tools have changed since they were first recorded, and whether any tool description contains prompt-injection or data-exfiltration patterns. Call this BEFORE trusting a newly added or recently updated MCP server. Returns a verdict of clean or REVIEW_BEFORE_USE.

Parametersurlserver

get_drift_feed

List MCP tools across the public ecosystem whose definitions recently changed, newest first. Use to see whether a dependency mutated.

Parameterslimit

get_findings

List tools whose descriptions contain detected injection, concealment, or exfiltration patterns. Filter by severity: critical, high, medium, low.

Parameterslimitseverity

Version history

1
  1. v1.0.0LatestSep 16, 2026

Score

72% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts

    Publish an icon in the registry entry.

  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.