Tip: Roots Is Deprecated — Move Filesystem Scope Enforcement Into Server Config Now, Not in 12 Months
Because Roots was the protocol's structural filesystem boundary and it now has a 12-month sunset, scope enforcement drops into individual developer code where it becomes opt-in and inconsistently applied — the practical failure mode being agents reaching credential stores and `.env` files they were never meant to see. The recommended actions are ordered: first inventory which MCP servers actually run locally on developer machines, then enforce path restrictions in server-side configuration rather than trusting the client, then define accessible scopes explicitly through tool parameters and resource URIs. Do the inventory step first — most teams do not know how many local-filesystem MCP servers their developers have installed.
↳ Follow the thread