feat: check and cache permission remote MCP calls - #10930

Open

chkuang-g wants to merge 10 commits into

mainfrom

chkuang/mcp-role

Commits on Aug 17, 2026

feat: enforce and cache roles/mcp.toolUser for remote MCP calls
chkuang-g
committed
6c89823
address review feedback: implement cache TTL, print propagation warning, and make error handling type-safe
chkuang-g
committed
e144250
address review feedback: refine service account email suffix check
chkuang-g
committed
1608062
refactor: check IAM permissions first before setting role
chkuang-g
committed
480c484
refactor: rename ensureRoleBound to ensurePermissions and function to ensurePermissionsOrSetRole
chkuang-g
committed
e35665b
test: update onemcp_server spec permissions to match callTool implementation
chkuang-g
committed
436fc26
refactor: simplify permission cache to timestamp only and clean up missing permissions on failure
chkuang-g
committed
236754b
refactor: cache allowed permissions even when check fails and role needs to be bound
chkuang-g
committed
0afc330
remove logBullet
chkuang-g
committed
aae6a2b
Changelog
chkuang-g
committed
4b88f7b