Managing MCP tool permissions: an Agent Proxy for pre-authorization per tool
radim11 · reddit · 2026-09-07
A Reddit thread on permission control when agents use MCP servers. The author's team built an Agent Proxy that:
- Keeps API keys outside the agent context
- Restricts which hosts, methods, and paths the agent can access
- Allows/denies individual MCP tools, exposing only selected ones
- Runs the same policy with agents like Codex
- Keeps an audit trail of proxied requests
For example, an agent connecting to Linear can be limited to specific tools instead of the full MCP toolset. The question posed: do you approve tool calls as they happen, or control tool exposure upfront?
More from coding & agent
- Having Codex summarize weekly screen recordings turns into a fun self-review — vista8 · 2026-09-07
- Claude Code team reportedly ditched GUI/TUI, now using claude tag for 70%+ of work — himanshustwts · 2026-09-07
- Microsoft open-sources tgrep, a trigram-indexed grep up to 52x faster than ripgrep — jedisct1 · 2026-09-07
- How should billing work when an AI system auto-selects the model? — Colddew-YJ · 2026-09-07
- SmolVM: open-source microVM sandbox runs OpenClaw 2.0 in isolation, boots in milliseconds — aniketmaurya · 2026-09-07
- Researchers formalize the AI agent attack surface: models + data + tools + permissions — JayAlammar · 2026-09-07