DocsGPT

0 Fork 0

mirror of https://github.com/tiennm99/DocsGPT.git synced 2026-10-04 20:13:04 +00:00

Files

T

arc53-machine 5c8b97b609 Gate outside writes on the owner's stored credentials, not only connections

API-key, widget and public-link callers were held to the write allowlist
only on connected accounts, so they could still write through an API
tool or a signed-in MCP server that carries the owner's credentials. Any
write on credentials the caller doesn't hold is now refused unless the
owner allowlisted it, and a scheduled run for such a caller counts as not
holding any. The tool list names these writes per tool, so the allowlist
can offer them, and its copy now names every route it covers.

2026-09-29 15:41:34 +01:00

admin

Let a GitHub connection opt into write tools

2026-09-29 11:22:01 +01:00

answer

Hold /v1 key holders to the API write allowlist

2026-09-29 15:36:36 +01:00

connector

Merge main (roles and access revamp) into connectors

2026-09-29 14:02:26 +01:00

devices

fix: Make ticket claim atomic.