The server can't modify anything on your PC. It's read-only and local.
The MCP queries AppControl's local database and passes the results to your AI client and you must give consent for every tool type. Check the source also to confirm.
It's possible to use Ollama or something if you wanted to run this 100% local.