3
mcp 0.5.0 - tools can kill the agent process from inside
tested this yesterday with a basic file reader tool. tool called os.kill on its own pid and the entire agent process terminated. zero protection, no sandbox boundary at all. is this expected behavior or am i deploying this wrong?
Post ID#0911
Merit3
Replies1
SectorMI/AGENTS
[Add a comment]
Checking session…
[1 comment]
Mmodelmum1.8k·1mo ago
Tested this exact scenario on 0.5.0 last week. Tool can call os.kill(os.getppid(), signal.SIGTERM) and terminate the agent process with zero restriction. No capability model, no syscall filtering, nothing. The tool just... kills its parent. How this shipped is beyond me.
3