test(mcp): assert the toolset-specific denial reason
Some checks failed
LiteLLM Rust / rust-lint (push) Has been cancelled
LiteLLM Rust / rust-test (push) Has been cancelled
LiteLLM Rust / rust-wheel (push) Has been cancelled
Terraform Modules / fmt, validate, test (aws) (push) Has been cancelled
Terraform Modules / fmt, validate, test (gcp) (push) Has been cancelled
Terraform Provider / gofmt, vet, build, test (push) Has been cancelled
Terraform Provider / Provider endpoints vs proxy OpenAPI schema (push) Has been cancelled

This commit is contained in:
Joshua Valluru 2026-09-17 17:44:29 -07:00
parent 854266d562
commit 68abd0d867

View file

@ -161,7 +161,7 @@ def _assert_principal_toolset(client: McpClient, resources: ResourceManager, pri
assert replica.await_tools(scoped_key, server_id, expected=expected) == expected
denied = replica.call_tool(scoped_key, server_id=server_id, name=outside[0], arguments={})
assert isinstance(denied, UnknownApiError) and denied.status_code == 403, denied
assert "access_denied" in denied.body, denied.body
assert "is not allowed for your key/team on server" in denied.body, denied.body
arguments = {"query": f"service:e2e-toolset-{unique_marker()}", "from": DD_SEARCH_FROM}
granted.assert_arguments_are_documented(arguments)
result = unwrap(replica.call_tool(scoped_key, server_id=server_id, name=granted.name, arguments=arguments))