Symptom
The first tool call right after connecting is denied. A moment later the same call works.
Evidence what you'll see
- Log shows 'Access denied - path outside allowed directories'
- Then 'Updated allowed directories from MCP roots'
Cause
The server loaded roots in the background after start, so early tool calls ran before the allowed list was ready.
Fix steps
0 of 2 done
Your check marks stay in this browser only.
Verify the fix worked
- A tool call made right after connecting succeeds.
Did this fix it?
Sources and credit
Summarized in our own words from these public reports. Credit goes to their authors.
Provided as is, without warranty. Test in a non-production environment and back up first. Security-related steps: verify against the official docs. Terms · Request removal or attribution change