We also provide an open-source version for Strata so that you can have full control. You can self-host it on your own infrastructure, so your credentials never have to touch our servers.
That's nice, kudos. But trusting you is only half of the problem. I don't trust the LLM either.
Yeah I see what you mean. Many MCP clients has the ability to ask human for confirmation before a tool call is executed. In this way, you can check the tool call before it executes.
Is there any way for the LLM to bypass the request for human confirmation, or is it hard-coded into the deterministic MCP client code?
We do not build the MCP clients, but for many of the clients I believe it is hard-coded into the deterministic client code.