> Claude then uses the GitHub MCP integration to follow the instructions. Throughout this process, Claude Desktop by default requires the user to confirm indivi

> Claude then uses the GitHub MCP integration to follow the instructions. Throughout this process, Claude Desktop by default requires the user to confirm individual tool calls. However, many users already opt for an “Always Allow” confirmation policy when using agents, and stop monitoring individual actions. Seems like this is the root of the problem ; if the actions were reviewed by a human,would they see a warning "something is touching my private repo from a request in a public repo" ? Still, this seems like the inevitable tension between "I want to robot to do its thing" and "no, wait, not _that_ thing". As the joke goes, "the S in MCP stands for Security".