Wenxin Du a6ff910a60 fix(server): fail if MCP auth is enabled together with enable-api (#3435) ...

This PR introduces a startup validation check that prevents starting the
server if MCP Authorization is enabled alongside the legacy HTTP API
(`--enable-api` / `EnableAPI`). Because we are deprecating the legacy
endpoints and therefore no new features are supported, a clients could
potentially bypass MCP authorization policies by using the legacy HTTP
API if it is enabled.

Reported by: HE WEI（ギカク）

2026-06-18 13:33:49 +00:00

..

generic

fix(server): fail if MCP auth is enabled together with enable-api (#3435)

2026-06-18 13:33:49 +00:00

google

fix(server): fail if MCP auth is enabled together with enable-api (#3435)

2026-06-18 13:33:49 +00:00

auth.go

fix(server): fail if MCP auth is enabled together with enable-api (#3435)

2026-06-18 13:33:49 +00:00