opentel-mcp v0.18 Adds SHA-256 Hashing to Detect MCP Tool 'Rug Pull' Attacks
Thirumalaiboobathi · reddit · 2026-11-07
opentel-mcp v0.18 is a security-focused release making MCP server risks visible:
- Tool definition integrity (rug pull detection): Hashes each tool's name, description, I/O schemas and annotations with SHA-256 over a canonical form, flagging any runtime change, addition or removal — defending against the known MCP attack where an approved tool silently mutates. Supports pinning known-good hashes; mismatches raise high-severity events.
- Secret leak detection (opt-in): Flags tool outputs matching AWS keys, GitHub tokens, JWTs, Bearer tokens, recording only the type and count, never the matched text.
- Auth failure signals: Per-tool counters for auth-category failures so credential probing stands out.
- Sensitive tool auditing: Mark tools like delete or sendemail; every call gets an audit event with outcome and duration, without arguments.
- Clock-skew visibility: Skew is recorded per span with configurable tolerance, preventing stale data from looking fresh.
The author notes it's detection, not prevention; pattern-based secret matching can miss or false-positive; no tool arguments or result content are ever recorded. JS package first, Python to follow. Try the dashboard via npx opentel-mcp-ui --demo.
More from coding & agent
- Dev gives on-call agent long-term memory with Hindsight — here's what changed — aryan_tyagi_ase · 2026-11-07
- Developer shares personal tier list of AI coding agents and harnesses — _jaydeepkarale · 2026-11-07
- Rich author Will McGugan: AI-era bug reports are like full-body scans — hugobowne · 2026-11-07
- Dev argues agent skills are mostly slop, prefers a single master agent instead — teodorio · 2026-11-07
- Podcaster edits a 90-minute episode with Claude Opus 5.5 in about an hour — audrow · 2026-11-07
- 10 open-source repos to build an AI content factory, from OpenCreator to FLUX.2 — Aiden_Tech_Ai · 2026-11-07