From c3042bdd40fc3f0a675b0ed7b5300b5c29581ed8 Mon Sep 17 00:00:00 2001 From: stefan judis Date: Tue, 20 Oct 2026 15:08:47 +0200 Subject: [PATCH] fix: drop environment variable write scope from MCP config OpenAI's plugin review flagged create-account-environment-variable and update-account-environment-variable as soliciting secrets. The Checkly MCP server filters tools/list by granted scopes, so not requesting checkly:environment-variables:write removes both tools from the plugin. --- .mcp.json | 1 - test/plugin-config.test.ts | 3 +-- 2 files changed, 1 insertion(+), 3 deletions(-) diff --git a/.mcp.json b/.mcp.json index 9ca8f0d..987f700 100644 --- a/.mcp.json +++ b/.mcp.json @@ -12,7 +12,6 @@ "checkly:incidents:read", "checkly:incidents:write", "checkly:environment-variables:read", - "checkly:environment-variables:write", "checkly:status-pages:read", "checkly:rca:read", "checkly:rca:run", diff --git a/test/plugin-config.test.ts b/test/plugin-config.test.ts index 70f27f3..502d9d3 100644 --- a/test/plugin-config.test.ts +++ b/test/plugin-config.test.ts @@ -12,7 +12,6 @@ const EXPECTED_CHECKLY_SCOPES = [ "checkly:incidents:read", "checkly:incidents:write", "checkly:environment-variables:read", - "checkly:environment-variables:write", "checkly:status-pages:read", "checkly:rca:read", "checkly:rca:run", @@ -21,7 +20,7 @@ const EXPECTED_CHECKLY_SCOPES = [ "checkly:usage:read", ]; -test("Checkly MCP requests every supported OAuth scope", async () => { +test("Checkly MCP requests every supported OAuth scope except environment variable writes", async () => { const config = JSON.parse(await readFile(join(import.meta.dirname, "..", ".mcp.json"), "utf8")); assert.deepEqual(config.mcpServers.checkly.scopes, EXPECTED_CHECKLY_SCOPES);