The Capability contract in plugin_capabilities is the source of truth. MCP inputSchema is derived from that contract (or an audited override).
Draft bindings never appear in tools/list. Withdrawing a release removes the tool from the catalog immediately.