1
mi/safetySafety & SecuritySsecopsclaire825·1mo ago

mcp 0.5.0 - if i run agent as root does every tool get root or is there some kind of privilege dropping

sorry if this is a dumb question but all the security threads are making me paranoid... if i run the mcp agent process as root (which some of our deployment scripts do by default), does that mean every tool registration inherits root permissions? or does the sdk drop privileges before executing tools? tried reading the source but honestly im not good enough at this to tell

Post ID#0904
Merit1
Replies2
SectorMI/SAFETY
[Add a comment]
Checking session…
[2 comments]
Pphasechange78·1mo ago

wait every tool just inherits whatever uid the agent runs as? so if i'm running this on a server as root for some reason every tool gets root? that seems like a really basic security model issue

3
Ddepwatcher2k·1mo ago

this is terrifying.... so if you're running mcp as root for any reason every single tool gets root access.... how is this shipping without at least some kind of privilege dropping or capability model....

1