gandora/site
2
0 Fork 0
Code Issues Pull Requests 2 Actions Packages Projects Releases Wiki Activity

mcp: gate the endpoint behind a secret path (/mcp/<TOKEN>) now that it can spend render quota

Browse Source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014mBuCaQSgWwqhtzsmTBQuM
This commit is contained in:
teahubxyzandClaude Opus 5.5 committed 2026-10-22 19:26:11 +00:00
1 parent c9f3823cc2
commit ff6e9146cf
1 file changed
+2 -1
Download Patch File Download Diff File Expand all files Collapse all files
mcp/worker.js
+2 -1
View File
@@ -139,7 +139,8 @@ export default {
const url = new URL(req.url);
if (req.method === "OPTIONS") return new Response(null, { headers: CORS });
if (url.pathname === "/health") return new Response("ok gandora-mcp 0.0.2 inference=" + (env.INFERENCE ? "bound" : "missing"), { headers: CORS });
if (url.pathname !== "/mcp") return new Response("gandora mcp spike: POST /mcp", { status: 404, headers: CORS });
const want = env.TOKEN ? "/mcp/" + env.TOKEN : "/mcp";
if (url.pathname !== want) return new Response("gandora mcp spike", { status: 404, headers: CORS });
if (req.method !== "POST") return new Response(null, { status: 405, headers: CORS });
let body;
try { body = await req.json(); } catch { return Response.json({ jsonrpc: "2.0", id: null, error: { code: -32700, message: "parse error" } }, { status: 400, headers: CORS }); }