verae-mcp-timestamping-server/recommended-changes/2026-09-22-reject-content-bytes/How-to-implement-the-changes.md
George Lambert 326d90a9db fix: reject content/bytes on MCP tools
Harden stamp/verify/hash_report so unknown and content-shaped args fail
instead of being ignored; publish additionalProperties=false and cover
with schema/runtime tests. Also keep streamable-http host allowlist.
2026-09-22 11:11:26 -04:00

6 lines
95 B
Markdown

# How to implement
1. Add guard.py
2. Harden in build_mcp
3. Expand tests
4. uv run pytest -q