Skip to content
/ loom Public

Commit 0eedfe0

Browse files
ghuntleyclaude
andcommitted
Add audit logging for attach_weaver MCP tool
Log WeaverAttached event when users request weaver connection info via MCP, including read_only access mode in audit details. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
1 parent e3d4e2b commit 0eedfe0

File tree

1 file changed

+13
-0
lines changed
  • crates/loom-server/src/routes/mcp

1 file changed

+13
-0
lines changed

crates/loom-server/src/routes/mcp/tools.rs

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -478,6 +478,19 @@ pub async fn execute_attach_weaver(
478478
args.weaver_id
479479
);
480480

481+
// Log audit event
482+
state.audit_service.log(
483+
AuditLogBuilder::new(AuditEventType::WeaverAttached)
484+
.actor(AuditUserId::new(current_user.user.id.into_inner()))
485+
.resource("weaver", args.weaver_id.clone())
486+
.details(json!({
487+
"source": "mcp",
488+
"pod_name": &weaver.pod_name,
489+
"read_only": read_only,
490+
}))
491+
.build(),
492+
);
493+
481494
let result_text = format!(
482495
"Weaver {} connection info:\n\n\
483496
Status: {:?}\n\

0 commit comments

Comments
 (0)