Secure local code inspection for ChatGPT Web via read-only MCP bridge
Lucaslogged · reddit · 2026-08-21
The author explores the trade-off between utility and security when giving AI tools local access, sharing a narrow setup using an MCP tunnel.
Architecture:
ChatGPT Web → Secure MCP Tunnel → local MCP bridge → approved repo
Security Features:
- The bridge is read-only by default and restricted to a single approved repository root.
- No exposure of shell commands, Git execution, or arbitrary filesystem access.
- Allows ChatGPT to search and read only relevant files instead of ingesting the entire codebase.
The author asks how others approach this: sandboxing, containers/VMs, or read-only MCP tools?
More from coding & agent
- AI Agent Catches Vendor Contradictions by Cross-Referencing Proposals — nordic_ash · 2026-08-21
- Indie dev plans 'speaking training tool' using viral MediaCrawler scraper — yihui_indie · 2026-08-21
- Self-Hosted Read-Only MCP Server for Secure Email Access — ivan-capk-me · 2026-08-21
- Pydantic AI v2.32.2 released with realtime session and evals fixes — samuelcolvin · 2026-08-21
- Developer creates script to shorten verbose AI coding responses — victor_explore · 2026-08-21
- Wake: macOS app unifies chat history for 13 code agents — aigclink · 2026-08-21