Unverified50% confidenceDecision RuleExact time
CodeSmith takes a conservative approach to MCP capability determination: only discovery-type helpers with list_mcp/read_mcp in their names count as read-only, and everything else is treated as requiring approval and requiring network.
1
Sources
50%
Confidence
Long-term
Relevance
10/15/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedMCP servers are often third-party code, and the permission hints they declare (such as readOnly) are merely self-descriptions that cannot be forcibly verified by the host program, so Atomic Agent adopts a 'guilty by default' strategy and treats all MCP tools as change operations.76% similarUnverifiedWhen operating a database via MCP, it is recommended in production environments to create a dedicated read-only account for MCP or explicitly restrict the operable databases and tables to implement the principle of least privilege.74% similarUnverifiedThrough mcpc, both of these capabilities can be used regardless of whether an Agent's own MCP client supports progressive discovery and code mode.73% similarUnverifiedMCP tool calls trigger real operations (writing to databases, sending emails, etc.), so permission control and audit logging are especially important at the MCP server layer, which differs from API integrations that are primarily read-only queries.73% similarUnverifiedExplicit guardrails can be used to restrict MCP server operation permissions, for example by setting a database MCP server to read-only to prohibit destructive operations.73% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1037729API
curl https://kongchang.com/api/v1/knowledge/claims/1037729MCP
get_claim(id=1037729)