AistyMCP: open-source per-tool permissions for MCP servers, deny-by-default
iamjoehoward · reddit · 2026-09-15
Aisty.ai released AistyMCP (MIT-licensed) to fix MCP servers' all-or-nothing permission model: connecting a Jira server typically lets an agent create and delete tickets with no gate in between.
How it works:
- Deny by default, with per-tool permission sets (e.g. "may create tickets, may not delete them")
- Bind a permission set to a user; the agent only sees tools it's allowed to use
- Revocations are enforced on the next tool call
- Ships as a library, not a server — wire one permission check per tool invocation into your existing MCP server or gateway
It's an Alpha repo focused purely on MCP: no audit logs or identity provider integrations yet. The team claims you can make your own MCP server deny-by-default within an hour.
More from coding & agent
- Jerry Liu names "Just-in-Time OCR": the two-pass document pattern agent harnesses converge on — solyarisoftware · 2026-09-15
- GPT-6 Astra + Hyper3D Rodin MCP Turns One Image Into a Full 3D Scene — heyshrutimishra · 2026-09-15
- RAG chunking can strip the context your answer needs: attach doc titles and section metadata — gethackteam · 2026-09-15
- Shop owner vibe-codes an accounting app: one HTML file, 100 test suites, and the rules that keep agents honest — anime_king_1 · 2026-09-15
- Pydantic AI claims 20% speed win over LangChain with similar accuracy in third-party agent benchmark — solyarisoftware · 2026-09-15
- Man runs agent to auto-post on his FB page every 30 min overnight, using just 1% of quota — TheMoonMidas · 2026-09-15