A narrow tool description can hide broad backend credentials.
MCPAI SECURITY ENGINEERING
MCP least privilege
MCP tools should run with only the permissions needed for their advertised function.
A customer lookup tool connects using a database owner account that can read unrelated sensitive tables.
Which security control should be explicit?
REMEMBERAdvertised scope must match real backend privilege.
No uploads · No company data · No account required