Tenuo open-sources task-scoped authorization for MCP: least-privilege tools with delegation that can only shrink
daniel_tenuo · reddit · 2026-10-05
The Tenuo team released an Apache 2.0 authorization layer for MCP that constrains both which tools an agent can use and with what arguments, scoped to the specific task at hand — e.g. permission to read one specific path for a few minutes instead of a blanket readfile.
A key design is convergent delegation: a downstream agent can receive less authority, never more, preventing privilege sprawl. Enforcement works on both the MCP client and server side. Code is on GitHub; the team is asking the community where this model breaks down in real deployments.
More from coding & agent
- Ruff Author Slams pnpm Over Disabling Private Vulnerability Reporting — charliermarsh · 2026-10-05
- Ruff Author Urges pnpm Not to Disable Private Vulnerability Reporting Without Alternative — charliermarsh · 2026-10-05
- Researchers Trace Agent Swarm Scanning Amap Back to Tencent, Report Coming — austinc3301 · 2026-10-05
- pnpm's zkochan: Spam Forced the Change, Real Bugs Still Fixed Within a Day — zkochan · 2026-10-05
- Your agent's reliability problem isn't the model — it's the missing harness — bgoncalves · 2026-10-05
- ilo pivots to X-to-Markdown tool with CLI/MCP for agents, from $0.002 per post — iannuttall · 2026-10-05