News for hackers. Stuff that matters.

A comment on Introducing The Model Context Protocol. Parent comment

Re:Introducing The Model Context Protocol by informal007 on Monday November 25, 2024 @09:17PM (#42241987)
The result that MCP server returned will be transfer to MCP host(Claude, IDEs, Tools), there are some privacy issues because the process is automatic after one-time permission provided.

For instance, when there is something wrong for MCP host, it query all data from database and transfer it to host, all data will be leaked.

It's hard to totally prevent this kind of problem when interacting with local data, But, Is there some actions to prevent this kind of situations for MCP?

[ Parent | on HN ]
Re:Introducing The Model Context Protocol by jspahrsummers on Monday November 25, 2024 @09:36PM (#42242080)
Your concerns are very valid. This is partly why right now, in Claude Desktop, it's not possible to grant permission permanently. The most you can do is "Allow for this chat," which applies to one tool from one server at a time.
[ Parent | on HN ]