modelcontextprotocol/registry
Watch
1
0
Fork
You've already forked registry
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
registry/internal/api/handlers/v0
History
Repository files (latest commit first)
Filename Latest commit message Latest commit date
adam jones dcb5a6f696
 Add 5s timeout to DNS auth lookup to prevent resource exhaustion (#825) 
The DNS auth endpoint was vulnerable to resource exhaustion if an
attacker controlled a domain with a slow/non-responding authoritative
DNS server. Without a timeout, handler goroutines would block on DNS
resolution indefinitely, allowing an attacker to pile up goroutines
until OOM.

Production is protected by NGINX ingress's default 60s proxy timeout,
but this adds defense-in-depth with a tighter 5s bound.
2025-12-10 16:22:27 +00:00
..
auth Add 5s timeout to DNS auth lookup to prevent resource exhaustion (#825) 2025-12-10 16:22:27 +00:00
edit.go Replace / with - for operation IDs (#660) 2025-10-14 15:26:43 +03:00
edit_test.go Make Repository field properly optional in server.json (#717) 2025-10-29 13:23:47 +00:00
health.go Replace / with - for operation IDs (#660) 2025-10-14 15:26:43 +03:00
health_test.go Introduce v0.1 version of the API (#658) 2025-10-14 11:04:48 +03:00
ping.go Replace / with - for operation IDs (#660) 2025-10-14 15:26:43 +03:00
ping_test.go Introduce v0.1 version of the API (#658) 2025-10-14 11:04:48 +03:00
publish.go improve: Add hint about making GitHub org membership public in error messages (#772) 2025-11-17 13:59:19 +00:00
publish_integration_test.go Make Repository field properly optional in server.json (#717) 2025-10-29 13:23:47 +00:00
publish_registry_validation_test.go Introduce v0.1 version of the API (#658) 2025-10-14 11:04:48 +03:00
publish_test.go Make Repository field properly optional in server.json (#717) 2025-10-29 13:23:47 +00:00
response.go auth: New auth flow (#273) 2025-08-15 13:03:35 +01:00
servers.go Replace / with - for operation IDs (#660) 2025-10-14 15:26:43 +03:00
servers_test.go Introduce v0.1 version of the API (#658) 2025-10-14 11:04:48 +03:00
telemetry_test.go Make Repository field properly optional in server.json (#717) 2025-10-29 13:23:47 +00:00
ui.go Add simple web UI for browsing the registry (#757) 2025-11-10 12:37:36 +00:00
ui_index.html Add simple web UI for browsing the registry (#757) 2025-11-10 12:37:36 +00:00
version.go Introduce a /version API (#667) 2025-10-15 17:24:46 +03:00
version_test.go Introduce a /version API (#667) 2025-10-15 17:24:46 +03:00