Gautam Bharti

Declared vs. Observed: Measuring the Binding Gap in MCP Tool Declarations

Pre-execution authority controls for tool-using agents take a declaration as their input: a claim, written by the tool's publisher, about what the action does. The claim is treated as a property of the tool. It is a statement about a contract at a moment, and the contract moves....

Registry Descriptions Go Stale Unevenly: An 89-Day Measurement of Model Context Protocol Drift, and Why Drift-Ranked Re-Auditing Under-Covers It

A longitudinal measurement of description staleness in the official Model Context Protocol (MCP) registry. Security studies of the MCP ecosystem each audit a registry at a single point in time; none reports how long the descriptions they judged stay current, which is a necessary...