scriptoriumadmin/supermemory
1
0
Fork 0
mirror of https://github.com/supermemoryai/supermemory.git synced 2026-08-28 05:25:33 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix(mcp): resolve security access scope bypass in getDocument tool

Browse source
This commit is contained in:
Aditya kumar singh 2026-08-27 23:15:01 +05:30
parent f11d8c4620
commit 2e444ff8cd
1 changed files with 5 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
apps/mcp/src/server/tools/get-document.ts
View file

@ -32,9 +32,12 @@ export function register(deps: ToolDeps) {
const effectiveTag = await deps.resolveContainerTag()
const client = deps.getClient()
const document = await client.getDocument(args.documentId)
const docTags = document.containerTags
const docTags = Array.isArray(document.memoryEntries)
? document.memoryEntries
.map((entry: any) => entry.spaceContainerTag)
.filter(Boolean)
: []
if (
Array.isArray(docTags) &&
docTags.length > 0 &&
!docTags.includes(effectiveTag)
) {