45% of remote MCP servers changed their tool definitions in four weeks. The log is now a dataset.

A client that connects an MCP server reads its tool definitions: names, descriptions and input schemas. The model then reads them as instructions. Pinning a definition once and trusting it later only