Saltar a contenido

Seguridad

En despliegues públicos habilita OAuth y no montes el Docker socket, la raíz del host ni credenciales de larga duración.

Mandatory rules:

  1. Keep OAuth enabled for public deployments.
  2. Do not mount /var/run/docker.sock.
  3. Do not mount the host root filesystem.
  4. Do not expose unauthenticated MCP tools on the public internet.
  5. Treat file links and credential volumes as sensitive.
  6. Use disposable containers or VMs when granting broad authority.