verae-mcp-timestamping-server/recommended-changes/2026-09-22-reject-content-bytes/What-to-Change-To.md
George Lambert 326d90a9db fix: reject content/bytes on MCP tools
Harden stamp/verify/hash_report so unknown and content-shaped args fail
instead of being ignored; publish additionalProperties=false and cover
with schema/runtime tests. Also keep streamable-http host allowlist.
2026-09-22 11:11:26 -04:00

113 B

What to Change To

Reject forbidden content keys; forbid unknown args; additionalProperties false; tests pass.