Skip to content

Comments

[pull] main from modelcontextprotocol:main#307

Merged
pull[bot] merged 2 commits intothreatcode:mainfrom
modelcontextprotocol:main
Feb 19, 2026
Merged

[pull] main from modelcontextprotocol:main#307
pull[bot] merged 2 commits intothreatcode:mainfrom
modelcontextprotocol:main

Conversation

@pull
Copy link

@pull pull bot commented Feb 19, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

wingding12 and others added 2 commits January 26, 2026 18:28
On macOS, /tmp is a symlink to /private/tmp. When users specify /tmp
as an allowed directory, the server was resolving it to /private/tmp
during startup but then rejecting paths like /tmp/file.txt because
they dont start with /private/tmp.

This fix stores BOTH the original normalized path AND the resolved
path in allowedDirectories, so users can access files through either
form. For example, with /tmp as allowed directory, both /tmp/file.txt
and /private/tmp/file.txt will now be accepted.

Fixes #3253
…-path-resolution

fix(filesystem): resolve symlinked allowed directories to both forms
@pull pull bot locked and limited conversation to collaborators Feb 19, 2026
@pull pull bot added the ⤵️ pull label Feb 19, 2026
@pull pull bot merged commit a83b145 into threatcode:main Feb 19, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants