informatics-isi-edu / deriva-mcp-core / 23666893603

91%

push

github

Add plugin allowlist and per-user mutation claim gating

  Plugin allowlist (DERIVA_MCP_PLUGIN_ALLOWLIST): restricts entry-point
  discovery to a named set of plugins. If unset, all discovered plugins
  load (existing behavior). An empty list disables all external plugins.
  Skipped plugins are logged at WARNING. Closes a supply-chain hardening
  gap where any package installed in the venv could inject code by
  declaring the deriva_mcp.plugins entry point.

  Mutation claim gating (DERIVA_MCP_MUTATION_REQUIRED_CLAIM): a JSON
  object specifying a claim name and required value(s) that must be
  present in the token introspection payload for a principal to execute
  mutating tools when the kill switch is off. Example:
  {"groups": ["deriva-mcp-mutator"]}. List values use OR semantics;
  multiple keys use AND semantics. Principals lacking the claim receive
  {"error": "catalog mutations are not permitted for your account"} and
  a mutation_claim_denied audit event. The kill switch takes precedence
  when both are active. stdio mode is unaffected (defaults to allowed).

47 of 49 new or added lines in 5 files covered. (95.92%)

2244 of 2459 relevant lines covered (91.26%)

0.91 hits per line