Dev ships 14 read-by-default MCP servers with human approval for destructive infra ops
dockndevai · reddit · 2026-09-16
- A developer open-sourced a family of 14 MCP servers (Kubernetes, Kafka, ClickHouse, Azure, Grafana, PostgreSQL, Outlook/Teams, etc.) sharing one governance model for safely letting agents touch real infrastructure.
- Security design: tools are read-only by default with write/admin tools unregistered until you raise the access mode; allowlists plus protected resources mark things like kube-system as readable-never-mutable; destructive ops need an extra explicit flag; high-impact actions pause via MCP elicitation for live human approval ("a model can echo a confirmation string, it can't click your button"). Dry-run, JSON audit logs to stderr, and secrets redaction are built in.
- All MIT (one Apache), TypeScript, stdio, published on npm and the official MCP registry.
More from coding & agent
- Microsoft's MemSteer turns unlabeled user histories into agent memory supervision — MicrosoftResearch · 2026-11-02
- She fired herself from her own Instagram: AI agent runs the account, views up 82.3% — heyshrutimishra · 2026-11-02
- Sourcegraph: AI writes code faster than teams can review it, driving more outages — AI Engineer · 2026-11-02
- Tsinghua & Microsoft's HarnessMM cuts agent token use by up to 87.93% while raising success rate — rohanpaul_ai · 2026-11-02
- GitHub launches Agent HQ: Anthropic, OpenAI, Google coding agents in Copilot — emmanuelvivier · 2026-11-02
- DeepSeek open-sources Super-Agent, a coding agent that reads team chats to minimize human input — emmanuelvivier · 2026-11-02