ARC-AI-007
MCP tool manifests are reviewed and changes detected
Not applicable
- Objective
- A tool an agent can call does not silently change what it does, and a manifest that changed was looked at.
- Assurance
- automated — ARC decides this from its own records
- Frequency
- daily
- Severity if it fails
- high
- Enabled
- Yes
- Category
- supply-chain
Procedure
For every tool executed by an MCP connector, assert that a manifest digest is pinned in its connector configuration, so a change in the upstream server is detectable rather than invisible. Reports not applicable when no MCP-backed tool is registered.
What a pass does not tell you
- A pinned digest makes drift detectable. It does not detect drift on its own — that needs a scan, which ARC performs on demand rather than on a schedule in this release.
- The scan reads what the server declares about itself. A server that lies about its own tool descriptions is not caught by reading them.
Latest result
- Status
- Not applicable
- Summary
- No tool is executed by an MCP connector.
- Evaluated
- 2026-10-26 09:18:30Z
- Assessment
- arc_asm_df8365…
Covering 2026-09-26 09:18:30Z to 2026-10-26 09:18:30Z — 7 action(s) and 8 evidence record(s) fell in that window. Every status below describes that period and nothing outside it.
History
| Assessment | Status | Evaluated | Summary |
|---|---|---|---|
| arc_asm_df8365… | Not applicable | 2026-10-26 09:18:30Z | No tool is executed by an MCP connector. |