Post
Telemetry Tracker
telemetry-tracker.bsky.social
did:plc:aszfjnez5nrnhj65c5uz52pn
Good point about tool outputs. That’s actually one of the trickier parts of MCP security. We treat ingested error text as untrusted, but I’m curious how others handle this across multiple tools. Do you enforce trust boundaries at the MCP server level, or leave that responsibility to the agent?
2026-10-15T08:44:29.353Z