Skip to content

v2.1.0 — offer only read tools, plus chosen write tools

Choose a tag to compare

View all tags
@zw008 zw008 released this 15 Oct 09:07
· 58 commits to main since this release
v2.1.0
fb7f9b6

vmware-pilot mcp can now offer a subset of this server's tools (HLD §17 D-16, via vmware-policy 1.20.0):

vmware-pilot mcp --expose read --allow-write cancel_workflow
  • --expose read (or VMWARE_PILOT_MCP_EXPOSE=read) keeps only tools annotated readOnlyHint: true; --allow-write a,b
    (or VMWARE_PILOT_MCP_ALLOW_WRITE) keeps chosen write tools on top. The default is unchanged: every tool.
  • A bad value, or a name that is not a write tool of this server, stops the server before it serves (exit 2).
    Flags and environment variables are not mixed; a blank flag counts as not given. Pre-2.0 names are accepted.
  • This limits what clients are offered; it is not authorization. See "Limiting which tools are offered" in
    references/setup-guide.md, which also notes that an agent with a shell can bypass MCP, so the account itself
    must be least-privilege.
  • Requires vmware-policy>=1.20.0.
Assets 2
Loading