Unverified50% confidenceFactExact time
A Shell execution MCP tool without a command allowlist grants the Agent the same permissions as the user of the host process; if the process runs as root, the Agent has root privileges.
1
Sources
50%
Confidence
Long-term
Relevance
10/14/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedA local MCP server is launched by the Agent under the user's account and has the same permissions as the user, able to open any file and run any program.73% similarUnverifiedIn the MCP architecture, the Agent only forwards invocation requests to the server, and the server executes I/O and side effects, so permissions, auditing, and sandboxing can all be handled uniformly on the server side.70% similarVerifiedAt the authorization layer, an MCP server can act as an intermediary proxy responsible for holding, managing, and rotating access credentials, so that the Agent itself does not need to directly handle the underlying keys66% similarUnverifiedAgentOS achieves folder-level and operation-type-level permission control (e.g., write-only, no deletion) by adding an MCP layer on top of Cloudflare R2, with the MCP server validating and intercepting unauthorized operations.64% similarUnverifiedThe MCP server must treat parameters coming from the Agent as untrusted external input, and must not assume they are safe just because the request comes from its own Agent.64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1030549API
curl https://kongchang.com/api/v1/knowledge/claims/1030549MCP
get_claim(id=1030549)