4 ms·
Can you not just install/ restrict the available CLIs in the same way you do with MCPs? Or what else am I missing about why MCP is more secure than a CLI?
by zingar 4mo ago
Can you not just install/ restrict the available CLIs in the same way you do with MCPs?
Or what else am I missing about why MCP is more secure than a CLI?
- rubslopes 4mo agoMCP allows you to easily separate API requests from their access tokens, so that the LLM only has access to the requests part. Giving an LLM CLI access removes all boundaries, anything goes. EDIT: to add an example: I have a personal claw agent that I only use CLI, I don't care. But I'm also building an agent inside a company product, and there we use MCP all the way.
- octoberfranklin 4mo agoYou can easily do this with simple Unix `chmod x-rw` on a wrapper that makes HTTP requests, adding the access token as it does.
- noplacelikehome 4mo agoThe point is that you still need to expose a shell or a wrapper around exec to launch those commands. That is t appropriate when I want to lock the model down to working entirely from a sandboxed environment and expose some basic tools which are not “entire posix user space”. MCP servers are not dead, they’re just overused in contexts they don’t really make sense in.
- zaphirplane 4mo agoHow do you ensure the cli can use the auth without knowing how to read it ? It’s potentially a bearer Token
- wolttam 4mo ago[dead]
- mrgaro 4mo agoAnother examole which is trivial with MCP but hard with cli binaries: blocking certain commands, such as write operations from the agent. With MCP your client can easily have a blocklist for commands, but with cli you would need to code custom logic for each cli separately.
- dropofwill 4mo agoJust use scopes in the API key the agent uses? If you’re exposing something publicly that should be a requirement anyways. That’s how I use gh, aws, etc. No need to modify any of the code in the cli, they’re just wrappers.
- mikojan 4mo agoI want the harness to use read freely but require confirmation for write.
- whattheheckheck 4mo agoServer implementers have an information advantage than the client coders wiring clis together to do a job
- CamperBob2 4mo agoWith MCP your client can easily have a blocklist for commands, but with cli you would need to code custom logic for each cli separately. Nah. Just don't let your model do anything potentially destructive until three or four other models have vetted the proposed action. Filtering individual commands can never provide more than the shallowest semblance of security. If a smart model is hellbent on deleting your production database, it will write its own Python program to do it if the usual commands are blocked.
- octoberfranklin 4mo agoAccess control is the operating system's job, and modern OSes already provide plenty of great tools for doing that. Just use the existing sandboxing infrastructure like bubblewrap, seccomp, etc. I have way more faith in that than in something than some regex-based blocklist.