MCP Isolation
Last updated
What to keep in mind about isolation when connecting external MCP servers.
MCP servers are third-party processes whose behavior is unverifiable. Agenvoy treats them as untrusted by default and does not provide a per-server "trusted" flag. All MCP tool calls go through the same confirm gate as built-in tools. For batch operation, mark specific tools auto-approve through /mcp → permission (or POST /v1/allowlist with a tool block) rather than trusting a whole server.