HostShift adds MCP support but keeps real server changes behind reviewed CLI commands

oguzhane · reddit · 2026-07-23

A server-migration CLI adds MCP support, but keeps apply authority outside the protocol

The author of HostShift says they intentionally made the MCP layer unable to apply changes on real servers.

Instead, the MCP interface is limited to discovery, planning, explanation, review, dry runs, capability inspection, rollback metadata, and operator prompts. The actual execution path stays in a deterministic Go CLI, and the source server remains read-only: no sudo, no service restarts, no package installs, no config changes, and no temporary snapshots.

The post argues this is the safest boundary for infrastructure tools: let the agent provide context and planning, but keep irreversible actions behind a reviewed command issued by the operator.

Original post →

More from coding & agent

coding & agent channel →