Dev ships 14 read-by-default MCP servers with human approval for destructive infra ops
dockndevai · reddit · 2026-09-16
- A developer open-sourced a family of 14 MCP servers (Kubernetes, Kafka, ClickHouse, Azure, Grafana, PostgreSQL, Outlook/Teams, etc.) sharing one governance model for safely letting agents touch real infrastructure.
- Security design: tools are read-only by default with write/admin tools unregistered until you raise the access mode; allowlists plus protected resources mark things like kube-system as readable-never-mutable; destructive ops need an extra explicit flag; high-impact actions pause via MCP elicitation for live human approval ("a model can echo a confirmation string, it can't click your button"). Dry-run, JSON audit logs to stderr, and secrets redaction are built in.
- All MIT (one Apache), TypeScript, stdio, published on npm and the official MCP registry.
More from coding & agent
- OpenAI reportedly orchestrates 10k internal agents without quality loss, while users' sub-agents 'just burn tokens' — RexDouglass · 2026-09-16
- Dev rebuilds Radish: a Redis server running entirely inside a Cloudflare Durable Object — whoiskatrin · 2026-09-16
- Agent looked right but wasn't: when do you stop double-checking AI outputs? — Luvena21 · 2026-09-16
- RSIAgent improves agents without weight updates, beats GPT-6 Astra on OSWorld 2.0 — Roger_M_Taylor · 2026-09-16
- Engineer uses LLMs to turn knowledge into playable simulations, builds a chip fab game — thehiphopswami · 2026-09-16
- Open-Source Skill Strips AI Slop: 41 Patterns Caught Across 4 Review Gates — Roger_M_Taylor · 2026-09-16