[dropofwill]

Just use scopes in the API key the agent uses? If you’re exposing something publicly that should be a requirement anyways.

That’s how I use gh, aws, etc. No need to modify any of the code in the cli, they’re just wrappers.

[mikojan]

I want the harness to use read freely but require confirmation for write.

[whattheheckheck]

Server implementers have an information advantage than the client coders wiring clis together to do a job