From ecd82f43c9e412647d2d1e155809e83f452ce973 Mon Sep 17 00:00:00 2001
From: Basil Hosmer <basil@anthropic.com>
Date: Fri, 12 Sep 2025 00:36:21 -0400
Subject: [PATCH] Add rate limiting to auth server static file endpoint

- Apply staticFileRateLimit to /mcp-logo.png route in auth server
- Addresses remaining check failure about missing rate limiting
- Matches rate limiting pattern used in main server
---
 auth-server/index.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/auth-server/index.ts b/auth-server/index.ts
index 7e8dd69..cc1b72e 100644
--- a/auth-server/index.ts
+++ b/auth-server/index.ts
@@ -120,7 +120,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-app.get('/mcp-logo.png', (req, res) => {
+app.get('/mcp-logo.png', staticFileRateLimit, (req, res) => {
   // Serve from the main server's static directory
   const logoPath = path.join(__dirname, '../src/static/mcp.png');
   res.sendFile(logoPath);