scope your filesystem MCP server to one folder, not your home directory

watched a teammate point the filesystem MCP server at the home dir and hand the agent write access. dont. scope it to the project folder, keep human approval on writes, and assume anything the agent reads from the web is hostile. the capability jump is huge but so is the blast radius.