{
  "slug": "mcp-permission-drift-detection",
  "title": "MCP Permission Drift Detection",
  "product_id": null,
  "problem": "A changed tool listing may reflect a different authorisation context rather than a changed grant. Establish what a defensible comparison would require.",
  "inputs": "For a manual review: two dated, complete tool inventories; server and tool identities; authentication context; declared actions, resources and recipients; and authority references. Do not include credentials.",
  "results": "A free source-linked comparison worksheet and acceptance checklist. A reviewer records observed declaration differences and unresolved evidence. No new detector or automated comparison executable is delivered.",
  "decision": "Mark the comparison unestablished when identities, authorisation context, pagination coverage or timestamps cannot be aligned. Changes alone do not prove effective permission drift.",
  "exclusions": [
    "Unvalidated comparison pilot; no paid activation, price, executable entitlement or recurring service.",
    "No automatic MCP polling, live permission inspection, monitoring, drift detection guarantee or runtime enforcement."
  ],
  "variants": [
    "How should I compare MCP inventories for permission drift",
    "What evidence distinguishes a changed MCP list from changed authority"
  ],
  "evidence_route_id": "agentic_reviewed_mcp_tool_list_authorization_cache_context",
  "extra_routes": [
    "agentic_reviewed_mcp_tool_annotations_hints_not_permission_enforcement",
    "agentic_reviewed_mcp_registry_publisher_namespace_boundary"
  ],
  "checklist": [
    "Record both capture dates and exact server, tool and version identifiers.",
    "Establish comparable authentication context and complete pagination; retain source references without credentials.",
    "Compare declared actions, resources, recipients and authority references manually; record additions, removals and changes.",
    "Separate tool-list differences from verified effective-permission changes; record unresolved evidence.",
    "Require schema validation, deterministic comparison tests, adversarial fixtures and separate release approval before any new executable or paid activation."
  ],
  "id": "agentic_workflow_mcp_permission_drift_detection",
  "page_url": "/index-workflows/mcp-permission-drift-detection",
  "manifest_url": "/varexis-index/workflows/mcp-permission-drift-detection.json",
  "status": "comparison_pilot_unvalidated",
  "new_sku": false,
  "new_executable": false,
  "payment_required_to_read": false,
  "discovery_route_id": "agentic_reviewed_mcp_tool_list_authorization_cache_context",
  "evidence_routes": [
    "agentic_reviewed_mcp_tool_list_authorization_cache_context",
    "agentic_reviewed_mcp_tool_annotations_hints_not_permission_enforcement",
    "agentic_reviewed_mcp_registry_publisher_namespace_boundary"
  ],
  "evidence": [
    {
      "record_id": "VXI-EXT-PROCUREMENT-MCP-LIST-AUTH-CONTEXT-01-v1",
      "title": "MCP: Tool inventory depends on request authority",
      "url": "/varexis-index/records/mcp-tool-list-authorization-cache-context.json",
      "content_sha256": "ee1354bddeb675d5165328503912388164339599b3e5b552b34a52aa72105f02",
      "reviewed_on": "2026-10-18",
      "source_url": "https://modelcontextprotocol.io/specification/2026-07-28/server/tools"
    },
    {
      "record_id": "VXI-EXT-PROCUREMENT-MCP-TOOL-ANNOTATIONS-HINTS-NOT-PERMISSION-ENFORCEMENT-01-v1",
      "title": "MCP: Tool annotations describe hints, not enforced authority",
      "url": "/varexis-index/records/mcp-tool-annotations-hints-not-permission-enforcement.json",
      "content_sha256": "4f5ad4c44cbe328fb5eabf096988b33d45f0bbe96c57f6ee44ed48cdd8df9916",
      "reviewed_on": "2026-10-18",
      "source_url": "https://modelcontextprotocol.io/specification/2026-07-28/schema"
    },
    {
      "record_id": "VXI-EXT-PROCUREMENT-MCP-REGISTRY-OWNERSHIP-01-v1",
      "title": "MCP Registry: Publisher namespace is a limited identity check",
      "url": "/varexis-index/records/mcp-registry-publisher-namespace-boundary.json",
      "content_sha256": "414285693c77596cfc921d4ff17e2eb9a066cf11c0cccfd8b4f7f928458d79c0",
      "reviewed_on": "2026-10-18",
      "source_url": "https://modelcontextprotocol.io/registry/authentication"
    }
  ],
  "evidence_boundary": "Reused dated documentation reviews retain their original source dates, versions, exclusions and provenance. Compilation does not refresh sources or expand executable profiles.",
  "free_preview_url": "/index-access?route=agentic_reviewed_mcp_tool_list_authorization_cache_context",
  "input_schema_url": null,
  "demonstration_url": null,
  "product": null,
  "purchase_url": null,
  "runtime_enforcement": false,
  "independent_live_system_testing": false,
  "certification": false,
  "content_sha256": "c67412276c4ada7924f15232e3f6e60e744b9542de93b8820a4ec62e7fc27c8c"
}