Dev builds MCP bridge linking web AI chats to local code editors, seeks security feedback
Quiet-Baker8432 · reddit · 2026-11-14
A Reddit developer is building Vantrel, an extension that bridges web AI chat sessions to a local editor workspace via MCP, to bypass monthly credit limits of paid IDE AI plugins. The local extension exposes workspace tools (file read/search, diff-based edits, sandboxed terminal execution) over a local MCP server, with a lightweight bridge connecting the browser chat to it.
The author asks the MCP community three design questions: whether file writes should be gated behind inline diff confirmations or a workspace-scoped auto-approve toggle; the minimal tool set before context bloat degrades output; and what attack vectors remain beyond localhost binding and workspace path scoping. The project is pre-release, with feedback wanted before the v1 protocol layer is locked.
More from coding & agent
- After 11 Months Building an AI Gaming Companion, This Dev Learned Timing Is Everything — SubzeroSun · 2026-11-14
- FastMCP 4.2 ships Skills as first-class MCP objects, delivering expertise alongside tools — EdenEmarco177 · 2026-11-14
- ThePrimeagen visualizes program state machines to regain control in the agent era — samgoodwin89 · 2026-11-14
- HarborRL update adds elastic scaling, SSH-free cluster deployment for agentic RL training — Dear_Treat3688 · 2026-11-14
- distilled goes self-hosting: tool now fetches AWS schemas via its own generated package — samgoodwin89 · 2026-11-14
- korea-data-mcp Resolves Korean Company Identity Traps: 13,530 Firms Share 5,573 Names — youngtipted · 2026-11-14