Repository navigation
Task should inherit current agent permissions/tools for MCP #3808
Description
Description
I've created an "offline" agent to limit the risk of leaking sensitive data via prompt inject when working on untrusted data.
"agent": {
"offline": {
"permission": {
"bash": {
"*": "ask",
},
"edit": "ask",
"webfetch": "deny",
},
"tools": {
"context7_*": false,
"gh_grep_*": false,
"kagi_*": false,
"webfetch": false,
},
},
},But the agent can easily circumvent the tools limitations by delegating the task to a sub-agent. And it does not even ask for permission to run the tool. This can be solved by disabling the task tool. But it would be better if by default tasks were using the same agent with the same permissions/tools.
PS: it seems to work fine for native tools like webfetch (not sure about this, sometimes it hangs sometimes it rightfully fails).
OpenCode version
1.0.15
Steps to reproduce
- Create an agent "offline" with
webfetchand mcp with online access disabled (ex: kagi) - Using the "offline" ask it to search online for whatever information
- It will delegate a task and use mcp tool like kagi
Screenshot and/or share link
No response
Operating System
macOS 26.0.1
Terminal
Ghostty
Activity
github-actions commentedon Nov 3, 2025
This issue might be a duplicate of existing issues. Please check:
falseare still visible and accessible to agents.Feel free to ignore if none of these address your specific case.
fix: inherit MCP tool allow permissions in subagent sessions
fix: inherit MCP tool allow permissions in subagent sessions
fix(opencode): inherit MCP tool allow permissions in subagent sessions