Security engineer: MCP servers' generic execute tools break granular tool controls
kai · reddit · 2026-11-12
A security engineer flags that MCP servers are breaking fine-grained access controls: Datadog's MCP server ships an executecode tool that lets agents search logs even when searchdatadoglogs is blocked, with similar patterns in Cloudflare and other servers.
- Shrinking tool surface area is a reasonable design goal, but allowlist/blocklist controls keyed on tool names stop working when a generic execution entry point exists.
- The poster asks whether this is intentional and calls for restoring granular, tool-level control.
More from coding & agent
- Long-running agents fail at step 95 of 100: system design is back — arpit_bhayani · 2026-11-12
- Founders brag they no longer read their agents' code; reply: wait for the 3am outage — DesireeCachette · 2026-11-12
- Qwen's terminal coding agent qwen-code nears 30k GitHub stars — QwenLM · 2026-11-12
- Dev uses RF-DETR to digitize tabletop wargames, shares IR frame pitfalls — TheZachMueller · 2026-11-12
- Developer cuts agent token costs to $0.24 per session, comfortably runs Opus 5.5 — pramodk73 · 2026-11-12
- Alibaba open-sources Open Code Review, its internal AI code reviewer with 50K GitHub stars — techNmak · 2026-11-12