Unverified50% confidenceFactExact time
Even if a plugin version is pinned in the configuration, the code actually loaded may still differ from expectations, because the plugin may pull remote configuration and the MCP server may point to endpoints that change.
1
Sources
50%
Confidence
Long-term
Relevance
10/24/2026
First Seen
Sources
You Don't Know What Code You're Running: The Hidden Risks of the AI Agent Supply Chain
youtubeSecurity Weekly - A CRA Resource10/23/2026
Related Entities
Related Claims
UnverifiedAfter restarting OpenCode, the MCP may not immediately appear at the top of the interface list, but the service can be confirmed as properly integrated via a validation command, indicating a UI display lag rather than a configuration failure.73% similarUnverifiedPi 1.0 directly embeds MCP capabilities through Codemode, allowing developers to invoke context and resource interfaces defined by MCP without setting up a separate connection layer.73% similarUnverifiedMCP servers can silently change their tool behavior after being approved, and agents will continue to invoke the new version without the user's knowledge.72% similarUnverifiedIf a developer both hosts an MCP server and publishes it as a package, the registry record must declare both packages and remotes; a record that declares only packages will make all clients that read the registry believe the hosted endpoint does not exist.72% similarUnverifiedThe caller of an MCP server is a model that may be misled, injected or simply make mistakes, so the security design must achieve "even if it errs, the fragmenting consequences are small and visible."72% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1092715API
curl https://kongchang.com/api/v1/knowledge/claims/1092715MCP
get_claim(id=1092715)