Menu

Post image 1
Post image 2
1 / 2
0

MCP Tool Search does not replace permission design

DEV Community·Mads Hansen·22 days ago
#cNayjJ7a
#mcp#database#ai#security#tool#capabilities
Reading 0:00
15s threshold

MCP Tool Search is a good answer to a very real problem: tool catalogs are getting too large to dump into every agent conversation. Loading fewer tool definitions means less token waste, less confusion, and fewer irrelevant capabilities competing for the model’s attention. But for database-connected agents, discovery is only half the problem. The harder question is: What is this tool allowed to do once the model finds it? Discovery is not authorization A searchable tool catalog can help an agent find the right capability. It should not become a shortcut around the permission model. For database MCP servers, I would rather expose narrow workflow tools: get_monthly_revenue_summary list_overdue_invoices find_customers_with_usage_drop get_support_escalation_context Than broad tools like: run_sql query_table execute_statement Tool Search can make safe capabilities easier to find. It can also make unsafe capabilities easier to reach if the catalog is poorly designed.…

Continue reading — create a free account

Join HashtagPLUS to read full articles, follow hashtags, vote, and join the conversation.

Read More