Skip to content

fix(mcp): refuse multi-operation documents and resolve fragments in checks - #811

Merged
sechmann merged 1 commit into
fix/gateway-test-socket-pathfrom
fix/mcp-graphql-validation
Oct 23, 2026
Merged

sechmann merged 1 commit into
fix/gateway-test-socket-pathfrom
fix/mcp-graphql-validation

Conversation

@sechmann

Copy link
Copy Markdown
Contributor

Fixes #809 (items 1 and 2).

  • Refuse documents with more than one operation, or any non-query operation
  • Resolve named fragments in the secrets and depth checks (replaces the fragment-name heuristic)
  • Extract validateQueryDocument and add tests

Item 3 (read-only credential) needs work in nais-api; MCP is already query-only.

@github-actions

Copy link
Copy Markdown
Contributor

📝 Changelog preview

Below is a preview of the Changelog that will be added to the next release. Only commit messages that follow the Conventional Commits specification will be included in the Changelog.

v7.0.2 - 2026-10-23

Full Changelog: v7.0.1...v7.0.2

🐛 Bug Fixes

  • (mcp) Refuse multi-operation documents and resolve fragments in checks (5a32fbc)

⚙️ Miscellaneous Changes

  • (device) Use short socket path on macOS (4bfadcf)

@sechmann
sechmann added this pull request to stack #813 October 23, 2026 10:35
@sechmann
sechmann merged commit 6ddc986 into main Oct 23, 2026
22 checks passed
@sechmann
sechmann deleted the fix/mcp-graphql-validation branch October 23, 2026 10:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

MCP execute_graphql: check every operation and fragment, and offer a read-only mode

1 participant