Tag

filesystem

2 entries, including 1 pattern.

1. Pattern3 Oct

   Enforced Filesystem Scope for MCP Servers

   Treat selected directories as intent and constrain the server process to the files it may actually open.

   • mcp
   • filesystem
   • isolation
   • threat-model
2. 3 Oct

   The folder picker did not confine the server

   MCP roots describe where a server should work; they do not restrict what its process can read.

   • mcp
   • filesystem
   • isolation
   • threat-model