"author:denislamard" matching MCP servers:

Grants an agent a bounded view of the filesystem where each directory is declared explicitly with a role (reference, sourcecode, workspace) that caps operations to read, write, or delete, resolving every path through a single confinement and permission checkpoint. Common secrets such as .env, keys, and .git are filtered from both access and listings, and deletions only move files into a per-root trash instead of erasing them.