The Permission Boundary My MCP Server Doesn't Actually Have
A developer discovered that the safety gate in their MCP server's update_article tool for DEV.to was not a true permission boundary, as the confirm and expected_fingerprint parameters were optional an…