Key Info

GMI Cloud published the permission model for gmi mcp serve, which gives agents GMI Cloud capabilities as tools. By default it exposes 36 read tools; --allow-write adds 42 write tools and --allow-destructive adds 12 delete tools.

Highlights

  • Default mode is read-only with 36 tools exposed to the agent.
  • --allow-write unlocks 42 additional write tools.
  • --allow-destructive unlocks 12 delete tools, gated behind a separate flag.
  • Sandbox tokens and API key creation are never exposed to the agent.
  • Tool output is redacted and capped to limit data leakage.
  • The quoted demo shows Codex (gpt-6.1-sol) starting a sandbox, running a command, querying a model and building a template.