groove/Part-DB-server
1
0
Fork 0
mirror of https://github.com/Part-DB/Part-DB-server.git synced 2026-07-27 11:41:36 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 5

Require authentication for accessing MCP tools

Browse source
This commit is contained in:
Jan Böhmer 2026-07-25 21:35:27 +02:00
parent 8b484d5776
commit 32669b2cc0
3 changed files with 14 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
config/packages/security.yaml
View file

@ -73,3 +73,6 @@ security:
- { path: "^/api", allow_if: 'is_granted("@api.access_api") and is_authenticated()' }
# Restrict access to KICAD to users, which has API access permission
- { path: "^/kicad-api", allow_if: 'is_granted("@api.access_api") and is_authenticated()' }
# Restrict MCP access to users, which has the MCP access permission
- { path: "^/mcp", allow_if: 'is_granted("@api.use_mcp") and is_authenticated()' }

5
config/permissions.yaml
View file

@ -381,7 +381,12 @@ perms: # Here comes a list with all Permission names (they have a perm_[name] co
access_api:
label: "perm.api.access_api"
apiTokenRole: ROLE_API_READ_ONLY
use_mcp:
label: "perm.api.use_mcp"
alsoSet: [ 'access_api' ]
apiTokenRole: ROLE_API_READ_ONLY
manage_tokens:
label: "perm.api.manage_tokens"
alsoSet: ['access_api']
apiTokenRole: ROLE_API_FULL