{
  "id": 1194153,
  "title": "The Permission Boundary My MCP Server Doesn't Actually Have",
  "url": "https://urgent.news/2026/08/16/the-permission-boundary-my-mcp-server-doesnt-actually-have",
  "topic": "ai",
  "section": "AI",
  "published": "2026-08-16T03:36:23.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/enjoy_kumawat/the-permission-boundary-my-mcp-server-doesnt-actually-have-3k98"
  },
  "original_language": "en",
  "account": "A recurring theme in recent agent-tooling posts is agents being given tools they can misuse, with builders adding gates to prevent misuse. The MCP server was modified with a gate for the update_article function, which edits live articles by ID, title, and body. The gate checks if the article is published and if the title or body is included in the article. If confirmed, the write proceeds, otherwise, a message is returned. However, the gate is not effective because the confirm argument is optional and not enforced. An additional layer was added to ensure the expected fingerprint of the article matches the current fingerprint, but this also has the same issue as the confirm gate. The author concludes that a permission boundary should enforce the check loudly by default, requiring an explicit skip instead of allowing omission.",
  "summary": "There's a theme showing up a lot in agent-tooling posts this week: agents holding tools they can misuse, and builders wiring some kind of gate in front of the dangerous ones — a signed capability, a policy layer, a human-in-the-loop check before the write actually lands. I built something that looks like that gate a while ago. Then I went and read my own code closely enough to notice it isn't…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}