Post

CLIs are definitely not more secure. That’s actually why we recommend developers build more remote MCP servers than local ones (unless necessary, like Ghidra MCP) because the whole idea of “install something locally with full machine access” to get some potential integration is kind of bad.

I think some of this comes down to "coding agent with an expert user driving it semi-interactively" vs "fully automated agent". Lotta people praise CLIs for the former without thinking about what it takes to sandbox one and avoid auth exfiltration

Oh totally. Even then - let’s teach everyone in the imaginable universe about proper sandboxing vs. just give me a URI 🤷

Agreed. After that, feels like the remaining objection to MCP is mostly around token usage; fancy agents like Claude Code and Cursor handle this well with tool search and writing big tool results to disk, but, well, "the future is not evenly distributed"