Unverified50% confidenceOpinionExact time
The Sierra report compares the authorization issues of MCP gateways to an iceberg, with protocol forwarding, tool routing, and other direct implementations visible above the waterline, and identity, per-tool permission scopes, user consent, and auditing hidden below
1
Sources
50%
Confidence
Long-term
Relevance
9/11/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe Sierra team recently published a hands-on report on MCP gateways71% similarUnverifiedIn MCP's security design, tool invocations are stipulated to require explicit user authorization, and resource access is constrained by permission boundaries.71% similarUnverifiedA mature MCP gateway needs a built-in user consent flow capable of triggering confirmation before an Agent performs high-risk actions, recording user authorization status, and updating permissions when authorization changes68% similarUnverifiedMCP协议在工具调用安全性方面采用了人机协同（Human-in-the-Loop）的设计理念67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/898031API
curl https://kongchang.com/api/v1/knowledge/claims/898031MCP
get_claim(id=898031)