mirror of
https://github.com/pomerium/pomerium.git
synced 2025-07-08 12:28:18 +02:00
f9e7308f12
## Summary Adds `mcp_tool` PPL criterion, that matches MCP tool names like ```yaml - from: https://db.localhost.pomerium.io to: http://localhost:3000/mcp policy: allow: and: - email: in: ["user@pomerium.com"] - mcp_tool: in: ["list_tables", "read_table", "search_records"] mcp: {} ``` ## Related issues Fix https://linear.app/pomerium/issue/ENG-2393/mcp-authorize-each-incoming-request-to-an-mcp-route ## User Explanation <!-- How would you explain this change to the user? If this change doesn't create any user-facing changes, you can leave this blank. If filled out, add the `docs` label --> ## Checklist - [x] reference any related issues - [x] updated unit tests - [x] add appropriate label (`enhancement`, `bug`, `breaking`, `dependencies`, `ci`) - [x] ready for review |
||
|---|---|---|
| .. | ||
| checkrequest | ||
| evaluator | ||
| internal/store | ||
| access_tracker.go | ||
| access_tracker_test.go | ||
| authorize.go | ||
| authorize_int_test.go | ||
| authorize_test.go | ||
| check_response.go | ||
| check_response_grpc.go | ||
| check_response_test.go | ||
| databroker.go | ||
| databroker_test.go | ||
| grpc.go | ||
| grpc_test.go | ||
| log.go | ||
| log_test.go | ||
| state.go | ||