Skip to content

MCP Security, Determinism, and Tests

Tool inventory and payload contracts: MCP interface. Platform diagnostics: Platform Observability tool.

Security model

Property Guarantee
Default transport Local stdio
HTTP auth streamable-http requires CODECLONE_MCP_AUTH_TOKEN (≥32 characters) for every start — loopback or remote; no unauthenticated HTTP mode
Remote exposure Explicit --allow-remote required for non-loopback bind
Lazy loading Base installs and CI do not require MCP packages
Read-only Never mutates source, baseline, cache, or canonical report artifacts; may write the ephemeral workspace intent registry under .codeclone/, optional audit/observability DBs, Engineering Memory draft rows, and projection job metadata when enabled

Determinism

  • Run identity is derived from canonical report integrity digest.
  • Summary, hotspots, findings, and remediation payloads are deterministic projections over stored run state.
  • MCP must not create MCP-only analysis semantics or MCP-only gate semantics.

Locked by tests

  • tests/test_mcp_service.py
  • tests/test_mcp_server.py
  • tests/test_mcp_tool_schema_snapshot.py
  • tests/test_observability_mcp_registrar.py
  • tests/test_observability_query.py

See also