feat(mcp): tools/call 自请求分发、CSRF 内部标记豁免与调用审计

This commit is contained in:
augushong
2026-08-16 22:46:32 +08:00
parent c21bf9f240
commit 0d20fd7786
3 changed files with 175 additions and 11 deletions

View File

@@ -4,6 +4,8 @@ APP_DEBUG=true
DEFAULT_TIMEZONE=Asia/Shanghai
AUTO_CACHE_LOG=false
AUTO_PARSE_API=true
# MCP/自请求内部分发场景可显式指定(缺省时回退入站请求同源回环)
;APP_HOST = https://your-domain.com
[DATABASE]
MAIN=main