Repository navigation

feat(server): every T3 MCP tool declares who may call it - #16335

Merged

juliusmarminge merged 14 commits into

mainfrom

t3code/mcp/declared-access

Oct 6, 2026

Commits on Oct 6, 2026
- fix(server): MCP launches bind only the project's own worktrees
  
  juliusmarminge
  and
  claude
  committed
  c73e903
- feat(server): every T3 MCP tool declares who may call it
  
  juliusmarminge
  and
  claude
  committed
  d16f002
- fix(server): MCP access checks can't be skipped or outlived
  
  juliusmarminge
  and
  claude
  committed
  5f68c43
- docs(server): agents learn they may launch within their own modes
  
  juliusmarminge
  and
  claude
  committed
  8206787
- fix(server): only McpToolAccess can build a declaration
  
  juliusmarminge
  and
  claude
  committed
  0dc83e6
- fix(server): task_cancel checks the child's modes, and declarations refuse Reflect
  
  juliusmarminge
  and
  claude
  committed
  f88e3d2
- fix(lint): every way of registering on /mcp goes through McpToolAccess
  
  juliusmarminge
  and
  claude
  committed
  97e689d
- fix(server): task_cancel checks every task it stops, and McpServer stays in McpHttpServer
  
  juliusmarminge
  and
  claude
  committed
  89fee81
- fix(server): task_cancel also checks the tasks under a deleted child
  
  juliusmarminge
  and
  claude
  committed
  dab39ce
- fix(lint): tests import McpServer only by its own name
  
  juliusmarminge
  and
  claude
  committed
  46d2e68
- fix(server): MCP writes need thread control, and launches skip removed worktrees
  
  juliusmarminge
  and
  claude
  committed
  0efd36c
- fix(server): MCP writes re-check a thread's modes under its command lock
  
  juliusmarminge
  and
  claude
  committed
  1402469
- Merge remote-tracking branch 'origin/main' into t3code/mcp/declared-access
  juliusmarminge
  committed
  94af7c4
- fix(server): check a fork's source modes on the copy it makes
  
  juliusmarminge
  and
  claude
  committed
  5b50653

Navigation Menu

Repository navigation

feat(server): every T3 MCP tool declares who may call it - #16335

feat(server): every T3 MCP tool declares who may call it#16335
juliusmarminge merged 14 commits into
mainfrom
t3code/mcp/declared-access

Commits on Oct 6, 2026

fix(server): MCP launches bind only the project's own worktrees

feat(server): every T3 MCP tool declares who may call it

fix(server): MCP access checks can't be skipped or outlived

docs(server): agents learn they may launch within their own modes

fix(server): only McpToolAccess can build a declaration

fix(server): task_cancel checks the child's modes, and declarations refuse Reflect

fix(lint): every way of registering on /mcp goes through McpToolAccess

fix(server): task_cancel checks every task it stops, and McpServer stays in McpHttpServer

fix(server): task_cancel also checks the tasks under a deleted child

fix(lint): tests import McpServer only by its own name

fix(server): MCP writes need thread control, and launches skip removed worktrees

fix(server): MCP writes re-check a thread's modes under its command lock

Merge remote-tracking branch 'origin/main' into t3code/mcp/declared-access

fix(server): check a fork's source modes on the copy it makes