Skip to content

fix: prevent tool calls through MCP when auth is required - #544

Merged
duwenxin99 merged 1 commit into
mainfrom
mcp-auth
May 7, 2025
Merged

duwenxin99 merged 1 commit into
mainfrom
mcp-auth

Conversation

@duwenxin99

@duwenxin99 duwenxin99 commented May 7, 2025 •

Copy link
Copy Markdown
Contributor

MCP does not support the authRequired feature. Disallow all MCP Tool call to Tools with authRequired set.

Fixes: #543

@duwenxin99
duwenxin99 requested a review from a team May 7, 2025 17:44
@kurtisvg kurtisvg changed the title fix: Disallow MCP Tool call for auth-required Tools fix: prevent tool calls through MCP when auth is required May 7, 2025
@duwenxin99
duwenxin99 merged commit e747b6e into main May 7, 2025
@duwenxin99
duwenxin99 deleted the mcp-auth branch May 7, 2025 19:24
averikitsch pushed a commit that referenced this pull request May 28, 2025
🤖 I have created a release *beep* *boop*
---


##
[0.6.0](v0.5.0...v0.6.0)
(2025-05-28)


### Features

* Add Execute sql tool for SQL Server(MSSQL)
([#585](#585))
([6083a22](6083a22))
* Add mysql-execute-sql tool
([#577](#577))
([8590061](8590061))
* Add new BigQuery tools: execute_sql, list_datatset_ids,
list_table_ids, get_dataset_info, get_table_info
([0fd88b5](0fd88b5))
* Add spanner-execute-sql tool
([#576](#576))
([d65747a](d65747a))
* Add support for read-only in Spanner tool
([#563](#563))
([6512704](6512704))
* Adding support for the --prebuilt flag
([#604](#604))
([a29c800](a29c800))
* Support MCP stdio transport protocol
([#607](#607))
([1702ce1](1702ce1))


### Bug Fixes

* Explicitly set query location for BigQuery queries
([#586](#586))
([eb52b66](eb52b66))
* Fix spellings in comments
([#561](#561))
([b58bf76](b58bf76))
* Prevent tool calls through MCP when auth is required
([#544](#544))
([e747b6e](e747b6e))
* Reinitialize required slice if nil
([#571](#571))
([04dcf47](04dcf47)),
closes [#564](#564)

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>
github-actions Bot pushed a commit that referenced this pull request May 28, 2025
🤖 I have created a release *beep* *boop*
---

##
[0.6.0](v0.5.0...v0.6.0)
(2025-05-28)

### Features

* Add Execute sql tool for SQL Server(MSSQL)
([#585](#585))
([6083a22](6083a22))
* Add mysql-execute-sql tool
([#577](#577))
([8590061](8590061))
* Add new BigQuery tools: execute_sql, list_datatset_ids,
list_table_ids, get_dataset_info, get_table_info
([0fd88b5](0fd88b5))
* Add spanner-execute-sql tool
([#576](#576))
([d65747a](d65747a))
* Add support for read-only in Spanner tool
([#563](#563))
([6512704](6512704))
* Adding support for the --prebuilt flag
([#604](#604))
([a29c800](a29c800))
* Support MCP stdio transport protocol
([#607](#607))
([1702ce1](1702ce1))

### Bug Fixes

* Explicitly set query location for BigQuery queries
([#586](#586))
([eb52b66](eb52b66))
* Fix spellings in comments
([#561](#561))
([b58bf76](b58bf76))
* Prevent tool calls through MCP when auth is required
([#544](#544))
([e747b6e](e747b6e))
* Reinitialize required slice if nil
([#571](#571))
([04dcf47](04dcf47)),
closes [#564](#564)

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com> 3180830
github-actions Bot pushed a commit to renovate-bot/googleapis-_-genai-toolbox that referenced this pull request May 28, 2025
🤖 I have created a release *beep* *boop*
---

##
[0.6.0](googleapis/mcp-toolbox@v0.5.0...v0.6.0)
(2025-05-28)

### Features

* Add Execute sql tool for SQL Server(MSSQL)
([googleapis#585](googleapis#585))
([6083a22](googleapis@6083a22))
* Add mysql-execute-sql tool
([googleapis#577](googleapis#577))
([8590061](googleapis@8590061))
* Add new BigQuery tools: execute_sql, list_datatset_ids,
list_table_ids, get_dataset_info, get_table_info
([0fd88b5](googleapis@0fd88b5))
* Add spanner-execute-sql tool
([googleapis#576](googleapis#576))
([d65747a](googleapis@d65747a))
* Add support for read-only in Spanner tool
([googleapis#563](googleapis#563))
([6512704](googleapis@6512704))
* Adding support for the --prebuilt flag
([googleapis#604](googleapis#604))
([a29c800](googleapis@a29c800))
* Support MCP stdio transport protocol
([googleapis#607](googleapis#607))
([1702ce1](googleapis@1702ce1))

### Bug Fixes

* Explicitly set query location for BigQuery queries
([googleapis#586](googleapis#586))
([eb52b66](googleapis@eb52b66))
* Fix spellings in comments
([googleapis#561](googleapis#561))
([b58bf76](googleapis@b58bf76))
* Prevent tool calls through MCP when auth is required
([googleapis#544](googleapis#544))
([e747b6e](googleapis@e747b6e))
* Reinitialize required slice if nil
([googleapis#571](googleapis#571))
([04dcf47](googleapis@04dcf47)),
closes [googleapis#564](googleapis#564)

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com> 3180830
jeffreyrubi pushed a commit to jeffreyrubi/genai-toolbox that referenced this pull request Jun 7, 2025
…#544)

MCP does not support the `authRequired` feature. Disallow all MCP Tool
call to Tools with `authRequired` set.

Fixes: googleapis#543
NightStack15 added a commit to NightStack15/googleapis-_-genai-toolbox that referenced this pull request Mar 20, 2026
🤖 I have created a release *beep* *boop*
---


##
[0.6.0](googleapis/mcp-toolbox@v0.5.0...v0.6.0)
(2025-05-28)


### Features

* Add Execute sql tool for SQL Server(MSSQL)
([#585](googleapis/mcp-toolbox#585))
([6083a22](googleapis/mcp-toolbox@6083a22))
* Add mysql-execute-sql tool
([#577](googleapis/mcp-toolbox#577))
([8590061](googleapis/mcp-toolbox@8590061))
* Add new BigQuery tools: execute_sql, list_datatset_ids,
list_table_ids, get_dataset_info, get_table_info
([0fd88b5](googleapis/mcp-toolbox@0fd88b5))
* Add spanner-execute-sql tool
([#576](googleapis/mcp-toolbox#576))
([d65747a](googleapis/mcp-toolbox@d65747a))
* Add support for read-only in Spanner tool
([#563](googleapis/mcp-toolbox#563))
([6512704](googleapis/mcp-toolbox@6512704))
* Adding support for the --prebuilt flag
([#604](googleapis/mcp-toolbox#604))
([a29c800](googleapis/mcp-toolbox@a29c800))
* Support MCP stdio transport protocol
([#607](googleapis/mcp-toolbox#607))
([1702ce1](googleapis/mcp-toolbox@1702ce1))


### Bug Fixes

* Explicitly set query location for BigQuery queries
([#586](googleapis/mcp-toolbox#586))
([eb52b66](googleapis/mcp-toolbox@eb52b66))
* Fix spellings in comments
([#561](googleapis/mcp-toolbox#561))
([b58bf76](googleapis/mcp-toolbox@b58bf76))
* Prevent tool calls through MCP when auth is required
([#544](googleapis/mcp-toolbox#544))
([e747b6e](googleapis/mcp-toolbox@e747b6e))
* Reinitialize required slice if nil
([#571](googleapis/mcp-toolbox#571))
([04dcf47](googleapis/mcp-toolbox@04dcf47)),
closes [#564](googleapis/mcp-toolbox#564)

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Tools with authRequired specified are still callable through MCP APis

2 participants