fix(security): classify public MCP aggregate readback

2026-07-15 09:37:49 +08:00
parent e32b30a1f0
commit d7be63f71e
3 changed files with 7 additions and 1 deletions
--- a/services/http_access_policy_service.py
+++ b/services/http_access_policy_service.py
@@ -42,6 +42,7 @@ INTENTIONALLY_PUBLIC_ENDPOINTS = frozenset({
    "misc.brand_assets",
    "system_public.favicon",
    "system_public.health_check",
+    "system_public.public_mcp_federation_readback_api",
    "system_public.webcrumbs_asset_proxy",
    "user_bp.get_password_reqs",
 })