PR #3782 #1145
reachjalilcodeql
on: dynamic
Matrix: analyze
Annotations
1 error and 1 warning
|
App-visible Program tools are not bound to the invoking app:
ee/apps/den-api/src/mcp/remote-mcp-apps.ts#L49
Any imported MCP App connected to this shared server may be able to invoke another app's app-visible `run_program_*` tool and receive its Program result, because visibility metadata does not authenticate the calling app.
|
|
Imported app Program tool is advertised without desktop bridge support:
ee/apps/den-api/src/mcp/remote-mcp-apps.ts#L136
The den launch result now advertises an app-visible `run_program_*` server tool, but the desktop MCP App host still initializes the bridge with no server tools, so imported apps cannot invoke the new Program path.
|