Hacker News Reader

bmurphy1976

I get that. Should and DO are different. But you aren't addressing my Streamable HTTP question which is the heart of what I asked.

View on HN

CLI enables the actions to be made on behalf of you, the external service is not aware whether it's you or AI making the calls. With MCP, Sentry knows it's AI making the call so can be smarter about the security. There is many MCP annotation hints on tools to mark the as destructive, read-only etc.

That's interesting, but that still sounds like something a proper auth/token permission system would more than address. You're also actively choosing to limit what functionality MCP provides, which is fine, but there are many ways to do the same via the API or CLI tooling.

I'm not saying you are wrong to do this, I just don't think it's enough to convince me that yes this is the one true approach you should use.

There's nothing special about using http other than most corporate firewalls allow it. It's just the pragmatic choice.

Reply on news.ycombinator.com