Managing MCP tool permissions: an Agent Proxy for pre-authorization per tool
radim11 · reddit · 2026-09-07
A Reddit thread on permission control when agents use MCP servers. The author's team built an Agent Proxy that:
- Keeps API keys outside the agent context
- Restricts which hosts, methods, and paths the agent can access
- Allows/denies individual MCP tools, exposing only selected ones
- Runs the same policy with agents like Codex
- Keeps an audit trail of proxied requests
For example, an agent connecting to Linear can be limited to specific tools instead of the full MCP toolset. The question posed: do you approve tool calls as they happen, or control tool exposure upfront?
More from coding & agent
- Security tip: use AI agents to build a NIST CSF knowledge base for incident response — prasanna_says · 2026-10-26
- Google Cloud Adds Self-Learning Context Enrichment to Knowledge Catalog for AI Agents — rseroter · 2026-10-26
- Cloudflare Previews Spend Limits for Workers and Durable Objects, Early Access Open — ritakozlov · 2026-10-26
- Shopify design lead on AI-era workflow: designers are becoming full-stack editors — KlausCodes · 2026-10-26
- Nace AI launches Drex for Search, cutting agent steps 62% and tokens 56% — testingcatalog · 2026-10-26
- Ultrametric open-sources Open Startup Repo to let AI agents run startup operations — garrytan · 2026-10-26