Review MCP tool definition changes before granting access
A practical change-review packet for MCP server identity, tool schemas, annotations and runtime effects, with a synthetic release comparison.
Read the guideTopic 05
Files & tool execution
Constrain file access and command execution at the tool boundary.
Safer file and shell tools for AI workflows
Replace broad command execution with narrow operations, validate arguments and object access, and verify filesystem boundaries under realistic runtime conditions.
Read the guide