Unverified50% confidenceFactExact time
Goose grants trust by default to MCP servers manually added by users, so a write tool falsely labeled as read-only will be executed directly without any confirmation.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/8/2026
First Seen
Valid until: 1/6/2027
Sources
Related Entities
Related Claims
UnverifiedWith a self-hosted solution, conversation history, imported documents, and retrieved knowledge all remain within the user's control, preventing sensitive information from being uploaded to third-party servers.66% similarUnverified接收请求的机器主人理论上能读到发送的内容，因为数据需在接收端解密才能被模型处理，因此共享机制本质是信任问题66% similarUnverifiedMCP can perform permission control, for example by intercepting the Delete keyword in database requests and rejecting them outright.65% similarUnverifiedA registry/whitelist mechanism works by maintaining a pre-established list of fingerprints or public keys for known legitimate MCP servers, allowing only servers on the list to pass.63% similarUnverifiedIts open-source nature allows users to audit Readr's claim of not uploading data, providing a verifiable trust basis for its privacy commitment.63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/988965API
curl https://kongchang.com/api/v1/knowledge/claims/988965MCP
get_claim(id=988965)