MCP Filesystem Server: Share One Folder Read-Only
Configure MCP Filesystem Server for one read-only reference folder, confine legacy client Roots, verify allowed and denied reads, and recover from setup errors.
Read the storyTHE INTEL LIBRARY
Follow your curiosity.
Postgres MCP Server Setup for Claude Code, Codex and Cursor: Make Read-Only Mean Read-Only With a Database Role
Connect a Postgres MCP server to Claude Code, Codex and Cursor through a least-privilege role, then prove a COMMIT-stacking probe fails before trusting it.
Read the story
Cloudflare MCP Server Setup for Claude Code, Codex and Cursor: Move From /sse to /mcp, Sign In With Scoped OAuth, Fix invalid_grant
Set up a Cloudflare MCP server in Claude Code, Codex or Cursor: replace /sse URLs with /mcp, grant read-only permissions, fix invalid_grant and roll back.
Read the story
Linear MCP Server Setup for Claude Code, Codex and Cursor: Connect Read-Only First, Then Turn a Plan Into Issues
Connect the Linear MCP server to Claude Code, Codex and Cursor read-only first, then add approved writes, turn a plan into reviewed issues and fix auth loops.
Read the story
Docker Sandboxes Claude Code Setup: Run sbx With a Chosen Workspace, a Tight Network Policy and a Clean Teardown
Docker Sandboxes Claude Code setup with sbx: pick a network preset, choose a bind, read-only or clone workspace, allow needed hosts, verify, then tear down.
Read the story
MCP Inspector: Diagnose a Connection and Verify a Tool Call
Use MCP Inspector to isolate connection, discovery and tool-call failures with a complete echo example, a read-only config and clear recovery steps to follow.
Read the story
Claude Code SQL Server Setup (and Codex): Run Microsoft's SQL MCP Server on a Dev Copy Under a Read-Only Login
Claude Code SQL Server setup with Codex: a db_datareader login, Data API builder's SQL MCP Server with read-only entities, a refused-write test and rollback.
Read the story
AI Agent Context Isolation: When a Finance Agent Shares a Computer With Your Slack Bot
A read-only agent on a shared computer can reach every sink its siblings have. Map sources against sinks, treat shared machines as one zone, gate posts as you.
Read the story
WebMCP registerTool: Register Three Tools Before You Redesign Your Site
Make your site agent-callable without a redesign: register one read-only and two gated WebMCP tools with annotations, a kill path and an origin trial test.
Read the story
The Standing Brief: Run a Read-Only Channel Agent on an Observability MCP Server
Anthropic gave a Slack channel a standing job and a Datadog MCP server. Start a rung lower: a read-only brief with owner, toolsets, evidence and a kill switch.
Read the story
Memory Is an Input: Write-Provenance Rules for Shared Agent Memory
Shared agent memory lets one agent teach the rest of a repo. Inventory each store, record the source of every write and keep untrusted-input lanes read-only.
Read the story
AWS MCP Server Lambda Triage: Split Diagnostic Reads From Deploy Writes
The AWS MCP Server Lambda capability triages in one read-only call. Keep deploy writes on a separate IAM role, MCP config entry and human gate, logged apart.
Read the storyPUT THE IDEAS TO WORKMany assistants.
Meet Automater Many assistants.
One place to remember.
Bring your AI sessions, context, and usage together with Automater.
Get started
Be the boss of all your AIs.
Lite is free forever, installs in about a minute, and reads the session history you already have.
Download Lite
Also for macOS (Apple silicon) and Linux.
Signed installer. No account. Session content stays on your disk.
