MCP servers, sandboxed — introducing ACT

Setting up an MCP server for your AI agent today usually looks like this: npx -y @some-org/mcp-server # or uvx some-mcp-server # or the occasional curl https://example.com/install.sh | bash The server runs as you. It can read your home directory. It sees your SSH keys, your .env files, your shell history, your browser cookies, your GPG keyring. If the server has a bug — or a malicious dependency sneaks in — the code that reads those files also runs as you. If your kernel or any installed binary