Unverified50% confidenceCautionExact time
"Read-only" in a prompt is not a permission boundary; both the CLI and the local MCP server need platform-level constraints enforced on the execution environment, filesystem, network, and resource limits.
1
Sources
50%
Confidence
Long-term
Relevance
10/13/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedPermissions granted to agents via MCP may involve write operations, system calls, and even access to sensitive data, not merely read-only queries.67% similarUnverifiedIn production environments, it is recommended to tighten open-terminal's attack surface with read-only mounts, network isolation, and strict CORS policies.65% similarUnverifiedShared package caches (such as the local cache directories of pip and npm) are often treated as read-only infrastructure rather than communication channels during sandbox design, and therefore lack integrity verification and access auditing for written content.64% similarUnverifiedThe protection boundary of the Full Disk Access mechanism is limited to the local file system and is completely unaware of cross-system access initiated through network protocols (such as REST API, gRPC, JDBC)63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1014731API
curl https://kongchang.com/api/v1/knowledge/claims/1014731MCP
get_claim(id=1014731)