Skip to content
Courses/Agents and automation/MCP for Local Tools

MCP for Local Tools

MCP is useful when the agent needs real context and tools, but every local tool is a doorway. Start with read access, allowlists, and traces before exposing commands or write access.

  • Design small, auditable tools with minimal permissions.
  • Separate reading, search, writing, and execution.
  • Create a clear contract for approving dangerous actions.
Terminal
tools:
  search_notes:
    mode: read
    allowed_paths: ["./docs", "./notes"]
    max_results: 10

  read_file:
    mode: read
    allowed_extensions: [".md", ".txt", ".json"]
    max_bytes: 20000

  run_check:
    mode: execute
    allowed_commands:
      - "npm run lint"
      - "npm test"
    requires_human_approval: false

  delete_file:
    enabled: false

Risk-Based Design

  • Low risk: search, read, list, summarize.
  • Medium risk: create drafts, write to a temporary folder.
  • High risk: delete, publish, send, charge, touch production.
Terminal
trace:
  task_id: "agent-2026-07-05-001"
  tool: "read_file"
  args:
    path: "docs/precios.md"
  decision: "allowed"
  reason: "extension .md, path inside ./docs"
  bytes_returned: 4821

Official Sources

  • MCP introduction
  • MCP specification: tools
  • MCP specification
Complete Aulafy mapSee how this lesson fits without leaving your path.

Complete Aulafy map

How all courses connect

This is not a checklist. Start with the foundation, choose an outcome, and go deeper only when your project needs more control.

  1. 1Understand
  2. 2Apply or build
  3. 3Operate with confidence
01

Choose an application

Turn the foundation into a visible outcome: a website, a business improvement, media, or an interactive experience.

Continue into the technical branch when you need to maintain code, data, or infrastructure.

02

Build with code

Prepare your environment, work with coding agents, and run models while keeping control of your projects.

This branch prepares you to design and operate reliable AI systems.

03

Take systems to production

Combine retrieval, agents, evaluation, security, deployment, and model adaptation when the problem requires it.

You do not need every course: choose the component your system needs and return as it grows.

View full catalogue