gitea-mcp

mathias/gitea-mcp

Fork 0

Files

T

History

mathiasandClaude Opus 5.5 724a997002

CD / Deploy via GitOps (push) Successful in 5s

Details

CD / Lint / Test / Vet (push) Successful in 31s

Details

CD / Build & Import (push) Successful in 14s

Details

feat(mcp): audit-log every tools/call (OWASP MCP08)

tools/call dispatched with no record, so repo_delete, pr_merge and
file_delete left no trail in gitea-mcp; only auth acceptance was logged.

One slog record per call: tool, caller, token fingerprint, target
(owner/repo/number/branch/path/tag), outcome, duration. Every other
argument is reduced to args_bytes so the audit line never copies file
content or issue bodies.

Closes #64

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-01 20:34:59 +02:00

audit_test.go

feat(mcp): audit-log every tools/call (OWASP MCP08)

2026-10-01 20:34:59 +02:00

audit.go

feat(mcp): audit-log every tools/call (OWASP MCP08)

2026-10-01 20:34:59 +02:00

jsonrpc_test.go

chore(rename): module gitea.d-ma.be → git.d-ma.be/mathias/gitea-mcp (#39 )

2026-07-03 22:48:26 +02:00

jsonrpc.go

test(mcp): pin session concurrency, document error codes, assert id round-trip