marchon/verae-mcp-timestamping-server
Watch
1
0
Fork
You've already forked verae-mcp-timestamping-server
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
verae-mcp-timestamping-server/recommended-changes/2026-09-22-reject-content-bytes/What-to-Change.md
George Lambert 326d90a9db fix: reject content/bytes on MCP tools 
Harden stamp/verify/hash_report so unknown and content-shaped args fail
instead of being ignored; publish additionalProperties=false and cover
with schema/runtime tests. Also keep streamable-http host allowlist.
2026-09-22 11:11:26 -04:00

155 B
Raw Permalink Blame History

What to Change

Tool arg models ignored unknown keys so content/bytes/file could be sent and silently dropped. Schema lacked additionalProperties=false.