verae-mcp-timestamping-server/recommended-changes/2026-09-22-reject-content-bytes/How-to-implement-the-changes.md
George Lambert 326d90a9db fix: reject content/bytes on MCP tools
Harden stamp/verify/hash_report so unknown and content-shaped args fail
instead of being ignored; publish additionalProperties=false and cover
with schema/runtime tests. Also keep streamable-http host allowlist.
2026-09-22 11:11:26 -04:00

95 B

How to implement

  1. Add guard.py
  2. Harden in build_mcp
  3. Expand tests
  4. uv run pytest -q