Build your own MCP of allowed tools. Cargo. Ripgrep. File read and write, including directory listing and find. some git commands. Then block everything else.

Terrible advice. Turn on the sandbox, limit network connections, and let 'er rip.

My problem with that is it makes the shittiest bash scripts to do basic things like search for a file and it gets them wrong for minutes at a time. It’s depressing. But yeah, that’s the other option. Just don’t watch.

The bash scripts are actually more surgical and token efficient ime