MCP Shell Server Accesses Full User Permissions and Credentials
August 28, 2026
Model Context Protocol (MCP) shell servers execute commands with the same UID and permissions as the host user. This allows agents to access sensitive files like SSH keys in ~/.ssh and AWS credentials in ~/.aws without additional authorization.
HOW THIS AFFECTS YOU
●
builderYou must implement sandboxing or containerization when exposing shell tools to agents.
●
policyYou need to develop security frameworks for agentic tool-use permissions.