The MCP Tool List Grew Mid-Session and Your Agent Called a Tool It Had Never Been Told About
A security incident review reveals that an AI agent called a tool whose name did not appear in any logged tool list response, because the MCP server added the tool mid-session and the client failed to…