Granular tool permissions for coding agents: MCP argument-level rules shipped as open source
radim11 · reddit · 2026-10-21
The author discusses how granular permissions for coding agents should be: should an agent with a GitHub tool access every repo? Can you restrict the arguments it passes, especially when the underlying credential lacks resource-level scoping?
They recently shipped MCP argument-level rules and JSON body rules for API requests as part of an open-source CLI for coding agents, enabling gradual permission control beyond allow/deny of whole tools. The post asks whether practitioners would actually use this in agent workflows.
Related event: Parameter-Level Rules Proposed for MCP Tool Permission Control(2 posts)→
More from coding & agent
- Index Network open-sources Social Discovery Protocol: agents negotiate fit on your behalf — carsonfarmer · 2026-10-23
- Installed a formal-verification skill: it silently installed Java, MacBook runs 10 degrees hotter — zealcaiden · 2026-10-23
- OpenAI's Decisions API hits GA: near real-time routing up to 10x faster than GPT-6 Luna — OpenAIDevs · 2026-10-23
- Ruff author warns: upgrade Node/Bun now — --use-system-ca still accepts the eMudhra cert — charliermarsh · 2026-10-23
- Proof of Agent: paste one prompt and your AI mines, grades, and self-governs — adamamcbride · 2026-10-23
- DeepLearning.AI weekly: GPT-6.1 hits 97.9% byte parity on COBOL migration — DeepLearningAI · 2026-10-23