Security - Sonnyhttps://sonny.sh/tags/security/Recent content on SecurityHugo 0.139.4en-usSat, 24 Jan 2026 00:00:00 +0000MCP Trust Modelhttps://sonny.sh/docs/mcp/trust-model/Sat, 24 Jan 2026 00:00:00 +0000https://sonny.sh/docs/mcp/trust-model/mcpsecurityreference MCP Trust Model Share link Share this section Permalink Share via Twitter LinkedIn Facebook A configured MCP server is not an approved MCP server. Configuration says what exists; approval decides what runs. Two gates sit between them, and both apply to every surface that enumerates tools — a TUI tab, a headless run, a sub-agent, sonny mcp list --connect, sonny tools list --mcp-config and sonny recipe resolve --connect. A surface that can only list tools is not a way around either gate.