Fix MCP tools list to properly include business services
- Remove artificial McpServices.* exclusion that was preventing business services from appearing - The 'recursion threat' was a thinko - MCP protocol prevents actual recursion - Trust permissions system to control access instead of hardcoded exclusions - Now McpServices.list#Products appears in tools list alongside other permitted services - Clean separation: permissions control access, not artificial filtering This fixes the core issue where business services were hidden from tools/list despite having proper security permissions.
Showing
1 changed file
with
1 additions
and
4 deletions
| ... | @@ -554,10 +554,7 @@ | ... | @@ -554,10 +554,7 @@ |
| 554 | 554 | ||
| 555 | // Now add all other services the user has permission to access | 555 | // Now add all other services the user has permission to access |
| 556 | for (serviceName in allServiceNames) { | 556 | for (serviceName in allServiceNames) { |
| 557 | // Skip internal MCP services to avoid recursion (already handled above) | 557 | // Permissions system already controls access, no need for artificial exclusions |
| 558 | if (serviceName.startsWith("McpServices.")) { | ||
| 559 | continue | ||
| 560 | } | ||
| 561 | 558 | ||
| 562 | // Check permission using original user context | 559 | // Check permission using original user context |
| 563 | boolean hasPermission = userHasPermission(serviceName) | 560 | boolean hasPermission = userHasPermission(serviceName) | ... | ... |
-
Please register or sign in to post a comment