Unverified50% confidenceFactExact time
Installing a Skill or discovering an MCP tool does not create permission to read orders; the receiving system must check the caller and the target.
1
Sources
50%
Confidence
Long-term
Relevance
10/14/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedMCP's classification standard for Tools is not based on whether they read or write, but on whether they need to execute a piece of logic based on input parameters76% similarUnverifiedIn the MCP design, agents cannot escalate their own permissions; privilege escalation must loop back to request user approval, keeping control in the hands of the user.75% similarUnverifiedIn this use case, all MCP tools of each diagnostic Agent are read-only/query type (e.g., get VIP, inspect VM, get pods) and do not perform any modification or change to systems.72% similarUnverifiedWhen an MCP server cannot reliably identify the client making a request, any entity that can reach that service endpoint may obtain data or invoke tools under the guise of a legitimate client.71% similarUnverifiedMCP规范要求主机在运行任何工具之前必须先询问用户确认，强制保留人工介入环节71% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1024452API
curl https://kongchang.com/api/v1/knowledge/claims/1024452MCP
get_claim(id=1024452)