Evgeny Boger
|
476c1baf40
|
Add GitHub MCP proxy with repo scope enforcement
- Host-side proxy that injects GitHub tokens and enforces single-repo scope
- Defense-in-depth: owner/repo checks, search query scoping, tool allowlist,
server-side X-MCP-Toolsets/Lockdown headers, header protection
- Token generation via GitHub App device flow with repo-scoped OAuth tokens
- Comprehensive tests (unit + end-to-end with mock upstream server)
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
|
2026-02-16 00:44:29 +01:00 |
|