Verified65% confidenceFactTime unknown
The design of MCP Server follows the principle of least privilege, with each Server exposing only the tools within its area of responsibility
3
Sources
65%
Confidence
Long-term
Relevance
5/31/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedMCP的设计中Server是被动的，不思考、不决策，只暴露工具等着被调用78% similarUnverifiedDevelopers building agent platforms or MCP servers should adopt the principle of least privilege and only request the permission scopes that the business truly needs.78% similarUnverifiedMCP servers can be run under IAM rules and Kubernetes RBAC, using the principle of least privilege to restrict the resources they can access and the operations they can perform.76% similarUnverifiedIn MCP, tokens obtained by a client are scoped to a single server and carry a single, narrow permission.75% similarUnverifiedSecurity recommendations for remote MCP Servers include: first understand the server implementation, use only an allowed tools whitelist, add approval for any write operations, and treat all tool returns as unstructured input to stay vigilant against prompt injection.74% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/6564API
curl https://kongchang.com/api/v1/knowledge/claims/6564MCP
get_claim(id=6564)