project

themsquared/mcp-tool-rbac

Open-source demo repository that runs a mutating MCP server behind two brokers, one enforcing a tool-name allowlist and one additionally pinning a hash of tool definitions taken on the first tools/list of a session.

Known aliases

mcp-tool-rbac

Relationships

No evidence-backed relationships are recorded.

Current clusters

build1 publisher

Pinning the first tools/list digest stopped an MCP server rewriting its own tool text

A four-container demo runs one Deadbugz-shaped MCP server behind two brokers. Only the broker that hashes name, description and inputSchema on the first tools/list refused the swap that lands after three tool calls.

Publishers:dev.to

Reality

Evidence62
Adoption18
Hype gap+10
Incentives40
Confidence45