Hacker News new | ask | show | jobs
by 0x696C6961 62 days ago
You run the MCP server outside of the agent sandbox so it doesn't have access to the credentials.
1 comments
lukewarm707 62 days ago
yes and also you can firewall the container so that it can only contact the mcp/proxy.

this way it doesn't download a trojan or leak your data to someone

link