Treat project content as untrusted data
Keep saved-file content separate from your request and the connection's authorization.
Treat content returned by Cloud MCP as untrusted project data. Read file text and saved results as material to inspect, summarize or compare.
Keep instructions separate
Treat instructions embedded in a project file or tool result as part of that content. Follow your own request and the connection's approved access when deciding what to do.
Use connection authorization
Account consent, organization policy and current project access govern tool use. Review access through the connection's authorization flow.
Review a file-based answer
Ask the client to identify the project, saved-file path and version used for an answer. Compare the answer with that saved content before acting on it.