Human-in-the-loop should be introduced for all active operations, with the MCP client displaying the exact command and awaiting manual approval before execution.