🥽 fix: Restrict MCP Server URL Disclosure to Admins, Owners, and Editors - #13784

Merged

danny-avila merged 6 commits into

devfrom

oss/redact-non-user-sourced-mcp-config

Jun 16, 2026

Commits on Jun 16, 2026

🥽 fix: Redact Non-User-Sourced MCP Server URLs by ACL Edit Permission
dustinhealy
committed
4c4d284
🥽 fix: Correct getResourcePermissionsMap import path + tighten redact comments
dustinhealy
committed
ea5b54f
chore: import order
dustinhealy
authored
f942934
🥽 fix: Redact OAuth Revocation Endpoint Alongside Authorization And Token URLs
dustinhealy
committed
fe2caf9
🥽 fix: Gate Shared DB Server URL Disclosure On ACL Edit Permission
dustinhealy
committed
78ec490
📝 docs: correct redactServerSecrets URL-disclosure comment
danny-avila
committed
29fff22