2 min lesson

When editor permissions do not govern the CLI

Replace one copied editor allowlist with exact CLI permission tokens and verify the terminal result.

read_schema is allowlisted in the editor, but the terminal still prompts because CLI permissions are separate.

Inspected CLI access or assumed access

Inventory: Inspected CLI access: The CLI server inventory shows analytics-db as connected from the project config over stdio. · Assumed access: Enabling a duplicate server without checking its config source and transport.

diagram: compare

Pick a row to see what to look for.

When editor permissions do not govern the CLI

Step 1 of 3