MCP users debate field-level redaction instead of all-or-nothing tool access
Sad_Cover9067 · reddit · 2026-07-24
An MCP output could be sanitized field-by-field instead of fully allowed or blocked
The post raises a permission-fatigue problem in agent workflows: after enough prompts, the user may stop making meaningful security decisions and just click Allow.
The author suggests a middle ground for MCP tools. If a tool returns:
json
{
"accountid": "12345",
"subscription": "pro",
"passportnumber": "AB1234567"
}
the agent may only need the account ID and subscription status. Instead of forcing a binary choice—either expose everything or block the whole response—the tool could preserve structure while replacing sensitive fields locally:
json
{
"accountid": "12345",
"subscription": "pro",
"passportnumber": "{{SEALED1}}"
}
The idea is that the model can keep working with the redacted response, while the real value stays local and could be restored later by the user.
The author says they are experimenting with this in a local tool, but they are unsure where the control should live:
- inside the MCP server,
- in the client,
- or in a proxy layer between them.
They also worry that mutating tool output may introduce ambiguity for the agent.
More from coding & agent
- Cognition's SWE-2 uses a KKT duality argument in RL to shift the effort Pareto curve — YouJiacheng · 2026-09-11
- First-ever Three.js Conference lands in Paris, with a panel on AI-shortened design workflows — OdinLovis · 2026-09-11
- Data engineering, not agent frameworks, is the real bottleneck for enterprise AI agents — dhruv2038 · 2026-09-11
- RTK Terminal Compression Cuts Tokens but Leaves Your AI Coding Bill Unchanged — Bartaseth · 2026-09-11
- GPT-6 Astra beats Factorio with enemies in 44 in-game hours at ~$4,500 API cost — liminal_bardo · 2026-09-11
- Investment Analyst Asks How to Build a Claude-Based Diligence Agent Stack — Careless_Tie2286 · 2026-09-11