Cyber AI Digest
  1. Paolo Costanzo Oct 20, 2026
    Synapse Halo mascot - News

    News

    None of the eight AI code clients tested asks for permission again when an MCP tool's description changes.

    • Claude Code, Goose and Qwen Code ask no question from the first call in their default configuration.

    • After the server's notification, Claude Code, VS Code and Cursor IDE fetch the new description without displaying anything.

    • Gemini CLI is the only client to report the change, with a line: "Tools updated for server".

    • In these clients, an approval is tied to the tool's name, not to what the tool says it does.

    Read the original article You approved the tool. Then it changed. paolocostanzo.github.io