release 2026.07.08-6b752bf

2026-07-08 06:05:32 +00:00
parent a8a083efd6
commit ff1f097514
3 changed files with 10 additions and 1 deletions
@@ -165,6 +165,10 @@ services:
      POSTGRES_CONNECTION: "Host=postgres;Port=5432;Database=mcp;Username=mcp;Password=${PG_PASSWORD}"
      CREDS_KEY_FILE: /run/secrets/creds_key
      MCP_ALLOWED_USERS: ${MCP_ALLOWED_USERS:-manager}
+      # Scope-Pflicht fürs Token: leer = aus (claude.ai/ChatGPT-Tokens führen den
+      # mcp-Scope nicht — ohne Durchreichen greift der Code-Default "mcp" und
+      # JEDER Tool-Call endet 403). Härtung per .env aktivierbar.
+      MCP_REQUIRED_SCOPE: ${MCP_REQUIRED_SCOPE:-}
    secrets:
      - creds_key
    ports: