arc53-machine 12ad4f5e85 Let a GitHub connection opt into write tools ...

A GitHub connection's MCP tool can now point at GitHub's full endpoint
(/mcp/) instead of the read-only one when its owner opts in, at setup
(allow_writes) or later (PUT /api/connections/<id>/writes), which re-reads
the actions and keeps the choices for those on both endpoints. Actions from
the write endpoint are writes unless GitHub marks them read-only, so they
default to asking first.

Admins can forbid it per connector (allow_writes in Admin > Connectors,
kept in app_metadata). Then the option is refused, a refresh goes back to
read-only, and at run time the tool only ever calls the read-only endpoint
and write calls are denied with a reason.

2026-09-29 11:22:01 +01:00

..

__init__.py

Add MCP presets, admin connector policies and connector attribution

2026-09-28 17:30:53 +01:00

activity.py

fix(admin): second review pass

2026-09-22 12:47:40 +01:00

connectors.py

Let a GitHub connection opt into write tools

2026-09-29 11:22:01 +01:00

quotas.py

feat(audit): split actor from subject on auth events

2026-09-22 10:18:16 +01:00

routes.py

fix(admin): second review pass

2026-09-22 12:47:40 +01:00