Windsurf MCP Integration: Missing Security Controls Put Users at Risk

<a id="top_ref"></a>

<p>Part of my default test cases for coding agents is to check how MCP integration looks like, especially if the agent can be configured to allow setting fine-grained controls for tools.</p> <p>Sometimes there are basic security controls missing.</p> <p>Especially when running an agent on your local computer. Stakes are much higher. And it seems important to empower users to