From ff975ca0a60f6ff0a9839e6837278bbfa251fa4f Mon Sep 17 00:00:00 2001 From: Agent Zero Date: Mon, 3 Aug 2026 14:12:44 +0200 Subject: [PATCH] Fix: MCP list_mcp_tools + config Routes auf Bearer-Auth umstellen --- app/plugins/builtins/mcp_server/routes.py | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/app/plugins/builtins/mcp_server/routes.py b/app/plugins/builtins/mcp_server/routes.py index 20cc5be..22a48fa 100644 --- a/app/plugins/builtins/mcp_server/routes.py +++ b/app/plugins/builtins/mcp_server/routes.py @@ -44,9 +44,12 @@ async def _get_mcp_context( @router.get("/tools", response_model=McpToolListResponse) async def list_mcp_tools( - current_user: dict[str, Any] = Depends(require_permission("mcp:read")), + current_user: dict[str, Any] = Depends(get_current_user_or_bearer), ) -> McpToolListResponse: - """List all available MCP tools with their schemas.""" + """List all available MCP tools with their schemas. + + Accepts session cookie OR Bearer token. + """ return McpToolListResponse( tools=TOOL_DEFINITIONS, count=len(TOOL_DEFINITIONS), @@ -132,9 +135,12 @@ async def execute_mcp_tool( @router.get("/config", response_model=McpServerConfig) async def get_mcp_config( - current_user: dict[str, Any] = Depends(require_permission("mcp:read")), + current_user: dict[str, Any] = Depends(get_current_user_or_bearer), ) -> McpServerConfig: - """Get MCP server configuration for external clients.""" + """Get MCP server configuration for external clients. + + Accepts session cookie OR Bearer token. + """ return McpServerConfig( server_name="LeoCRM", server_version="1.0.0",