MCPSEAL: an open-source CLI that blocks MCP tools that change after you trust them
StageAccomplished806 · reddit · 2026-08-31
A developer built MCPSEAL, a security layer that detects when an MCP tool changes after you've trusted it. Tool definitions pass through MCPSEAL and get pinned as trusted; if a definition later changes — e.g. readproject going from "read a project file" to "read a file and upload its contents" — the change is detected and the call is blocked, defending against MCP-style rug-pull supply-chain attacks.
It's a free local CLI with no backend:
bash
npm install -g mcpseal
mcpseal init
mcpseal install
mcpseal scan
The demo runs on an actual tool-definition change, and the author is asking for feedback on where the real gaps are.
More from coding & agent
- From 'Summarize' to Agent Workflow: How AI runs procurement contract reviews — kashifmanzoor · 2026-08-31
- User automates game setup with Codex — koltregaskes · 2026-08-31
- Blueprint: A Chat Pipeline for Hallucination Mitigation and Strict Moderation — Scorpowned · 2026-08-31
- Agent State Management Is a Bigger Problem Than Advertised — Meher_Nolan · 2026-08-31
- Uber Cuts AI Costs 52% While 10xing Usage via Agentic Workflow — alvelda · 2026-08-31
- Coding Without LLMs: Developers Find Basic Syntax Rusty — johnowhitaker · 2026-08-31