#least-privilege

Question 1: Single choice

Your agent uses an MCP server that runs as a local process on your laptop, not in the cloud. Is it automatically safe, and what precaution still applies?

Yes; a local process cannot reach any files outside the folder the agent's prompt mentions1
No; local MCP servers must never be used, only cloud-hosted ones2
Yes; MCP encrypts all traffic, which makes the server's outputs trustworthy3
No; it has all your user's permissions, so limit its scope and validate its outputs4

Timed test