Change watch for MCP servers you have approved
What can this MCP server change, and did that change since you approved it?
See each tool's label against what its schema allows, dated by version. Watch up to 3 servers free; $19 a month for 25, with alerts by email and API (not on sale yet).
Watching .
Baseline saved on : tools recorded (, by what the schema implies). From now we compare every later version to this one. The record is just below.
- Next check: by . We send no mail yet: read what changed any time with
get_changes, or open the server's page. - Watches used: of free.
One of our labels wrong for your server? Tell us at the reply address.
acme-tickets
send_digest arrived in v2.3.0 on 3 Nov. Its label says read-only; its schema takes recipients and a body, which points to sending mail.
Versions, newest first
-
v2.3.03 Nov 2026
Changed 1 tool added, none removed.
+ send_digest claims: read-only schema implies: send -
v2.2.121 Oct 2026
No tool added or removed. The description of get_ticket was edited.
-
v2.2.014 Oct 2026
Baseline The version you approved. 5 tools recorded.
Tools in v2.3.0
| Tool | Server says | Schema implies | Check | Since |
|---|---|---|---|---|
| send_digest | Read-onlyreadOnlyHint: true | Sendrecipients, body | Disagrees | v2.3.0 |
| delete_ticket | WritedestructiveHint: false | Deleteticket_id, permanent | Disagrees | v2.2.0 |
| close_ticket | WritereadOnlyHint: false | Writeticket_id, status | Agrees | v2.2.0 |
| add_comment | Not declared | Writeticket_id, text | No claim to check | v2.2.0 |
| get_ticket | Read-onlyreadOnlyHint: true | Readticket_id | Agrees | v2.2.0 |
| search_tickets | Read-onlyreadOnlyHint: true | Readquery, limit | Agrees | v2.2.0 |
Labels are findings from the tool's name, description and input schema, not a guarantee of what the server does. Each server watched gets a page like this, readable without an account.
Recently changed servers
How a label is decided, and what we keep
How a label is decided
Software reads the server's tools/list and compares the label the server declares with what the tool's name, description and input schema suggest: read, write, delete or send. Where they differ, the row says "Disagrees". Software, not a person, writes these findings, from keywords, so some will be wrong.
What we keep
- The server's public tool list, by version and date
- The server addresses you watch, and an anonymous owner id from your key
- Never a password, a token or a card
What we do not do
- Call a tool on any server
- Watch servers that need a login
- Promise a server is safe