# witcheer's Wingtips #105: trust: untrusted

Written by [witcheer](https://x.com/witcheer) at Nous Research. Republished with credit.

Canonical: https://hermeswatcher.com/wingtips/105  
Published: 2026-10-18  
[Original](https://notwitcheer.github.io/hermes-recipes/wingtips/105-mcp-trust/) · [On X](https://x.com/witcheer/status/2111721017336881281) · [Full collection](https://notwitcheer.github.io/hermes-recipes/) · [Official docs](https://hermes-agent.nousresearch.com/docs/reference/mcp-config-reference#server-keys)

[Source Markdown](https://raw.githubusercontent.com/notwitcheer/hermes-recipes/8653fb699a137a32e81936fa33cabacd3f4f2095/docs/wingtips/105-mcp-trust.md): use this file as the base for relative links in the verbatim text below.

Sources: [Hermes docs: Mcp Config Reference](https://hermes-agent.nousresearch.com/docs/reference/mcp-config-reference#server-keys)


want your Hermes Agent to ask before it changes anything through an MCP server?

`trust: untrusted`

add it under that server in config.yaml. tools the server marks read-only run as normal, and every other tool waits for your /approve.

docs: [https://hermes-agent.nousresearch.com/docs/reference/mcp-config-reference#server-keys](https://hermes-agent.nousresearch.com/docs/reference/mcp-config-reference#server-keys)