An MCP server can change what its tools do after you approved it. Your agent will call the new one and never notice.
mcpgawk records a baseline of every MCP server your agents use, checks behaviour in a sandbox, and sits in the path: once a tool's description or power changes, the call is refused until you decide. The agent cannot approve its own way past it.
Everything runs on your machine. Nothing is uploaded.
Free CLI, VS Code extension and MCP server. The gateway tier has a 7-day trial.
