I fingerprinted who actually calls my MCP tool, by response size. Two calls didn't check out.

My MCP server logs every tool call, but not who made it. I cross-referenced the app log against raw nginx bytes to identify two real external callers — and caught two more log lines I could not corroborate, so I'm not counting them.

Read Original

Related