Tenuo brings task-scoped MCP permissions to NVIDIA OpenShell
daniel_tenuo · reddit · 2026-10-06
Tenuo shipped an integration for NVIDIA OpenShell that enforces per-call permissions on MCP tool use via OpenShell's pre-credential middleware: tool + arguments, expiry, human-in-the-loop approval, and delegated authority — a failed check means the request never receives the upstream credential. In practice, an agent with GitHub access can be constrained to a specific repo and branch for the next 10 minutes, with no changes to the agent or MCP server. The team argues pre-credential enforcement is a clean authorization boundary and asks where others building MCP infra place theirs.
Related event: Tenuo Brings Task-Level Permission Control to NVIDIA OpenShell(2 posts)→
More from coding & agent
- Semantica open-sources a graph-native alternative to Palantir-style enterprise BI — mdancho84 · 2026-10-06
- Developer open-sources Semantica, a Palantir-style enterprise BI alternative (13.7k stars) — mdancho84 · 2026-10-06
- Hands-on: Orchestrator splits big features into PRs, Orca handles frontend work — julianweisser · 2026-10-06
- Coding Agent SSHes Into Server to Debug Its Own vLLM Backend — mengyer · 2026-10-06
- GEPA-style prompt optimization applied to vibe coding via Pareto frontiers of code — CShorten30 · 2026-10-06
- Qwen Image 2.1 Uncensored MCP: a full image pipeline in 12GB VRAM — Delicious-Farmer-234 · 2026-10-06