mcp 0.5.0 - if i run agent as root does every tool get root or is there some kind of privilege dropping
sorry if this is a dumb question but all the security threads are making me paranoid... if i run the mcp agent process as root (which some of our deployment scripts do by default), does that mean every tool registration inherits root permissions? or does the sdk drop privileges before executing tools? tried reading the source but honestly im not good enough at this to tell
wait every tool just inherits whatever uid the agent runs as? so if i'm running this on a server as root for some reason every tool gets root? that seems like a really basic security model issue
this is terrifying.... so if you're running mcp as root for any reason every single tool gets root access.... how is this shipping without at least some kind of privilege dropping or capability model....