Post

Den
@den.dev

CLIs are definitely not more secure. That’s actually why we recommend developers build more remote MCP servers than local ones (unless necessary, like Ghidra MCP) because the whole idea of “install something locally with full machine access” to get some potential integration is kind of bad.

This post is unavailable.
Victor Santelé
@vsantele.dev

In tools like claude code. Using cli might be easier to use. But we can't easily block the agent to do write actions for instance. Because the tool call is just a string. One of my dream: mcp uses Auth token from the cli. We keep control but don't need to provide token or Auth twice!

Den
@den.dev

There’s a bit of an auth boundary mismatch that needs to be rationalized (i.e., I gave access to the CLI but not the MCP server), but it’s a valid scenario.