T6-R5 in five minutes
The person should see which server and which tool are about to run.
A root is a boundary on which files a server may touch. Confirm the spec's current word for that boundary.
A server that can read every file is a different product from a server that can read one folder.
Approval for a draft is still required before a send.
OWASP's LLM risks include excessive agency. Read the current list.
Grant the notes folder, not the home folder. The trace records the folder. A later reviewer can see the boundary.
Sources and go deeper
- Model Context Protocol specification, 2025-06-18 spec last checked 2026-10
- OWASP Top 10 for Large Language Model Applications community last checked 2026-10
- What is the Model Context Protocol (MCP)? spec last checked 2026-10
- Model Context Protocol organization on GitHub community last checked 2026-10
- Model Context Protocol — Wikipedia wikipedia last checked 2026-10