Add role-based filtering to dynamic tool list#81

Open

Vortiago wants to merge 30 commits intomainfrom

claude/review-auth-viewer-role-nkvob

Commits on Mar 7, 2026

feat: add auth.info viewer role check to dynamic tool list
claude
committed
docs: clarify dynamic tool list checks and fallback behavior
claude
committed
fix: log actionable warning when 401 hides all tools
claude
committed
fix: log warning when apiKeys.list returns 403 (missing scope)
claude
committed
fix: log warning when auth.info returns 403 (missing scope)
claude
committed
test: add e2e tests for viewer role + auth.info 403 behavior
claude
committed
fix: create viewer API keys before role demotion
claude
committed
refactor: import WRITE_TOOL_NAMES in e2e tests to remove duplication
claude
committed
refactor: derive ALL_TOOLS from TOOL_ENDPOINT_MAP, add annotation completeness test
claude
committed
refactor: derive TOOL_ENDPOINT_MAP and WRITE_TOOL_NAMES from tool metadata
claude
committed
docs: add dynamic tool list architecture doc with mermaid diagrams
claude
committed
docs: fix sequential check ordering and remove redundant sections
claude
committed
refactor: replace readOnlyHint-based viewer check with explicit min_role meta
claude
committed

Commits on Mar 8, 2026