Timing and race conditions

Filesystem server says 'path outside allowed directories' on the first call

The first tool call right after connecting is denied. A moment later the same call works.