From 2e444ff8cd3efeff6f1e18fad2d5b51c94efb227 Mon Sep 17 00:00:00 2001
From: Aditya kumar singh <143548997+Adityakk9031@users.noreply.github.com>
Date: Thu, 27 Aug 2026 23:15:01 +0530
Subject: [PATCH] fix(mcp): resolve security access scope bypass in getDocument
 tool

---
 apps/mcp/src/server/tools/get-document.ts | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/apps/mcp/src/server/tools/get-document.ts b/apps/mcp/src/server/tools/get-document.ts
index ab5f8565..caf647d6 100644
--- a/apps/mcp/src/server/tools/get-document.ts
+++ b/apps/mcp/src/server/tools/get-document.ts
@@ -32,9 +32,12 @@ export function register(deps: ToolDeps) {
 				const effectiveTag = await deps.resolveContainerTag()
 				const client = deps.getClient()
 				const document = await client.getDocument(args.documentId)
-				const docTags = document.containerTags
+				const docTags = Array.isArray(document.memoryEntries)
+					? document.memoryEntries
+							.map((entry: any) => entry.spaceContainerTag)
+							.filter(Boolean)
+					: []
 				if (
-					Array.isArray(docTags) &&
 					docTags.length > 0 &&
 					!docTags.includes(effectiveTag)
 				) {