Enterprise DNAEnterprise DNA
MMCP ServersDeveloperlow

Paraphern/rugsnare

by Various

Pin MCP tool contracts, catch silent drift. Field audit of the npm MCP top: 218 silent contract changes (Microsoft, Google, Hostinger included) - receipts and weekly CI watch insid

Visit siteSubmit your build →

MCP

Paraphern/rugsnare

Added 18 Oct 2026

#ai-agents#audit#canary#ci#devsecops#devtools#integrity#mcp
Catalogue record, not a reviewed recommendation. This record can include automatically collected descriptions and setup details. Confirm important claims with the original source. Explore source-reviewed tools.

Overview

Rugsnare pins MCP tool contracts and detects silent drift. It includes a field audit of top npm MCP packages that found 218 silent contract changes, with receipts and a weekly CI watch. Written in JavaScript.

Best for

Best for
Developers building on MCP who need to guard against silent contract drift

Use cases

  • Pin MCP tool contracts to specific versions
  • Detect silent contract changes in MCP dependencies
  • Set up weekly CI monitoring for contract drift

Notes

3 stars on GitHub. Last updated 2026-10-18. Licensed Apache-2.0.

Pros

  • Provides concrete evidence of contract changes via receipts
  • Automates drift detection with a weekly CI watch
  • Targets a real, under-served problem in the MCP ecosystem

Cons

  • Low adoption (3 stars) suggests limited community validation
  • Vendor is listed as Various, so support and maintenance are uncertain
  • Scope may be limited to npm MCP packages
Free 27-page guide

Get the free Developer’s Field Guide

A 27-page field guide to the AI coding workflow with Claude. Claude Code, MCP servers, the prompt patterns that work, and what to delegate. Free.

Enter your work email. We send it straight over, plus a few short notes worth knowing. Unsubscribe any time.

No spam. Unsubscribe any time.

← Back to MCP ServersSubmit your own entry →