Bootcamp · Module 3 · Lesson 1 of 3
Least privilege for MCP tools
A tool that can read any file or fire any query is a second attack surface.
Enable only the MCP servers you need. Prefer read-only credentials for research tools.
Do not hand an agent a production database tool when a staging tool will do.
Review the tool list after each install; agents will call what you leave enabled.