Jian Qiu d4fa442de0 fix(mcp-server): do not expose server-monitor as an MCP tool (#25488) ...

server-monitor sends arbitrary QMP/HMP commands (pmemsave, migrate,
etc.) to a running guest, which exceeds the semantics of monitoring.
As an MCP tool it could be triggered without human awareness through
LLM prompt injection or the tool-request endpoint.

Remove the mcp-desc registration tag from ServerMonitorOptions so
climcgen no longer registers the tool, drop its mention from the MCP
instructions, and add a regression test asserting it is not exposed.
The climc command and the permission-gated region API are unchanged.

Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
Co-authored-by: Claude <noreply@anthropic.com>

2026-09-03 19:22:30 +08:00

..

adapters

feat(host): support Hygon DCU HAMI vdev core allocation (#25274)

2026-08-04 10:21:09 +08:00

climcgen

fix(mcp-server): do not expose server-monitor as an MCP tool (#25488)

2026-09-03 19:22:30 +08:00

options

fix(mcp-server): optimized mcp desc (#25193)

2026-07-21 16:19:09 +08:00

registry

Pengjingzhao ospp v2 (#23309)

2025-09-22 10:32:21 +08:00

server

fix: mcp streamable (#25310)

2026-08-13 16:37:25 +08:00

service

fix(mcp-server): mcp use climc struct (#25174)

2026-07-20 17:17:20 +08:00