Skip to content

Fix MCP invalid params and sensitive error disclosure - #2753

Merged
Widthdom merged 4 commits into
mainfrom
fix-issue1417-1469-1470
May 31, 2026
Merged

Fix MCP invalid params and sensitive error disclosure#2753
Widthdom merged 4 commits into
mainfrom
fix-issue1417-1469-1470

Conversation

@Widthdom

Copy link
Copy Markdown
Owner

Summary

  • Return JSON-RPC -32602 with structured parameter details for MCP scalar argument type mismatches.
  • Sanitize the MCP startup DB path in stderr logs by default, with full path output limited to CDIDX_DEBUG=unsafe.
  • Make unexpected MCP tool/loop catch-all wire errors generic by default while keeping detailed diagnostics in stderr.

Validation

  • dotnet run --project tools/CodeIndex.Changelog -- check
  • dotnet build CodeIndex.sln -c Release -p:UseSharedCompilation=false
  • dotnet test tests/CodeIndex.Tests/CodeIndex.Tests.csproj -c Release -p:UseSharedCompilation=false --filter McpServerTests
  • dotnet ./src/CodeIndex/bin/Debug/net8.0/cdidx.dll status --check --json
  • Adversarial review: No blocking/actionable issues found.

Documentation and Changelog

  • Added changelog.d/unreleased/1417.fixed.md
  • Added changelog.d/unreleased/1469.fixed.md
  • Added changelog.d/unreleased/1470.fixed.md

Follow-up Candidates

Fixes #1417
Fixes #1469
Fixes #1470

@Widthdom
Widthdom merged commit bb8ba98 into main May 31, 2026
10 checks passed
@Widthdom
Widthdom deleted the fix-issue1417-1469-1470 branch May 31, 2026 11:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

1 participant