Path validation resolves symlinks, and command blocking handles absolute paths and command substitution.
Install @wonderwhy-er/[email protected] with Node.js 18+ and an MCP-compatible client.
Fixed and improved
Directory validation blocks symlink traversal, and command blocking addresses absolute-path and command-substitution bypasses. These controls remain guardrails rather than a sandbox.
Now worksSet allowed folders, blocked commands, the default shell, file limits and telemetry preferences.
