Under the hoodTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
MCPArea: what it touches
Internal ChangesKind: in v2.1.265,
Internal ChangesSection of the release
What
The internal logic that checks whether a server's allowed-tools set is a subset of another set (used to enforce MCP tool restrictions) was rewritten around new helper functions that canonicalize and safely read array and object values. The new helpers bound how large a list can be and catch errors from objects with throwing property getters, guarding against malformed or adversarial input.
Why
This hardens the tool-allowlist comparison against malformed or maliciously-crafted data, so a bad MCP server response can't crash or bypass the allowlist check.
