Skip to content

[codex] fix: require trust for project MCP config#37

Open
chaochaoweb3 wants to merge 1 commit into
LiuMengxuan04:mainfrom
chaochaoweb3:codex/trust-project-mcp
Open

[codex] fix: require trust for project MCP config#37
chaochaoweb3 wants to merge 1 commit into
LiuMengxuan04:mainfrom
chaochaoweb3:codex/trust-project-mcp

Conversation

@chaochaoweb3

Copy link
Copy Markdown

Summary

  • stop loading repository-local .mcp.json by default
  • add MINI_CODE_TRUST_PROJECT_MCP=1 as an explicit opt-in for project MCP config
  • update /mcp guidance and English/Chinese docs
  • add regression tests for default skip and trusted project MCP loading

Fixes #35.

Validation

  • npm run check
  • npm test
  • npx eslint src/config.ts src/cli-commands.ts test/config.test.ts
  • git diff --check

@chaochaoweb3 chaochaoweb3 marked this pull request as ready for review June 30, 2026 05:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Project .mcp.json executes commands without trust confirmation

1 participant