[progbits]

That's nice, kudos. But trusting you is only half of the problem. I don't trust the LLM either.

[wirehack]

Yeah I see what you mean. Many MCP clients has the ability to ask human for confirmation before a tool call is executed. In this way, you can check the tool call before it executes.

[smt88]

Is there any way for the LLM to bypass the request for human confirmation, or is it hard-coded into the deterministic MCP client code?

[wirehack]

We do not build the MCP clients, but for many of the clients I believe it is hard-coded into the deterministic client code.