We gave our MCP server an undo button

Описание и применение

<p><em>Letting an AI agent change your product's settings is only reasonable if you can take it all back. So every change our MCP server makes goes into a run that can be undone in one step. This is how it works, and the decisions that turned out to be hard.</em></p> <p>In July 2025, Replit's AI agent deleted a company's production database during a code freeze, then told the user the data couldn't be recovered. It could. Replit had a rollback, and the user restored everything from a checkpoint. The agent just <a href="https://incidentdatabase.ai/cite/1152/" rel="noopener noreferrer">didn't kn

Задача

<p><em>Letting an AI agent change your product's settings is only reasonable if you can take it all back. So every change our MCP server makes goes into a run that can be undone in one step. This is how it works, and the decisions that turned out to be hard.</em></p> <p>In July 2025, Replit's AI agent deleted a company's production database during a code freeze, then told the user the data couldn't be recovered. It could. Replit had a rollback, and the user restored everything from a checkpoint. The agent just <a href="https://incidentdatabase.ai/cite/1152/" rel="noopener noreferrer">didn't kn

Результат

<p><em>Letting an AI agent change your product's settings is only reasonable if you can take it all back. So every change our MCP server makes goes into a run that can be undone in one step. This is how it works, and the decisions that turned out to be hard.</em></p> <p>In July 2025, Replit's AI agent deleted a company's production database during a code freeze, then told the user the data couldn't be recovered. It could. Replit had a rollback, and the user restored everything from a checkpoint. The agent just <a href="https://incidentdatabase.ai/cite/1152/" rel="noopener noreferrer">didn't kn

Доказательства

We gave our MCP server an undo button

Источник