MCP DriftWatch: Post-Approval Change Monitor for Connected Tool Servers

A monitoring service that fingerprints every approved MCP server connected to an agent fleet and alerts when the server changes after approval — new tools, rewritten descriptions, expanded scopes — so a trusted server cannot quietly turn hostile.