What can an agent actually do with context7, and who decides?

[javmann100]

I maintain an open-source project called mnki that puts a verification step in front of an MCP tools/call, so a client can see what an agent was authorised to do before the server runs it. I'm not selling anything today; I'm trying to find out whether "which server can do what, for whom" is a real problem for people who publish servers, or whether I've invented it.

One line in your README stood out to me: "❌ Code examples are outdated and based on year-old training data". That is the closest thing I have seen to an answer inside the server itself, and I would like to understand where it stops.

If you have 20 minutes I'd like to hear how you think about it and what users ask you. If it's easier to try than to talk: npx mnki-cli scan lists every MCP server configured on a machine and mnki protect --mode observe records what would have been denied without changing anything (https://mnki.com/docs/integrations).

Either way, thank you for context7.