4 Commits

Author	SHA1	Message	Date
Evan Rusackas	568f34d6d8	fix(mcp): enforce audience, algorithm, issuer binding, and token scopes (strict mode) (#40653) ... Co-authored-by: Claude Code <noreply@anthropic.com>	2026-06-09 11:08:20 -07:00
Amin Ghadersohi	7d69f76127	fix(mcp): API key authentication for MCP — transport, validation, and RBAC (#39604)	2026-06-04 15:04:43 -04:00
Amin Ghadersohi	e25d708197	fix(mcp): hide write tools from users without write permissions (#40098) ... Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-21 19:11:46 -04:00
Amin Ghadersohi	7943af359c	feat(mcp): implement RBAC permission checking for MCP tools (#38407) ... Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-12 17:35:07 +01:00