Thariq Shihipar says Anthropic has invested substantial effort in handling permission and visibility edge cases, including risks of cross-channel data exfiltration involving MCP.

“a lot of time into this yeah there's so many like edge cases you can figure out where it's like oh like yeah this cloud in this channel has different permissions but it can message another channel and can't exfiltrate data that way or like can you like what if it uses your mcp and then messages someone else like there's like so much and we've like really put a lot of work into sending it down and”