Add /api/v2/assets and /api/v1/page/_render-sources to MCP server whitelist
Open
@fmontes is already working on this.
Since Jun 16, 2026.
QA : Not Needed
Release : 26.06.21-01
Team : Scout
- Dominant language
- Java
- Stars
- 970
- Forks
- 486
- Avg merge
- 3d 33m
- Merged PRs (30d)
- 170
Description
Description
Two new REST endpoints were added and should be exposed by the agentic-tools MCP server (core-web/libs/agentic-tools/scripts/generate-spec.ts):
/api/v2/assets— read/write file assets (#36112)GET /api/v1/page/_render-sources/{uri}— locate a page's render sources (#36102)
/api/v2/assets requires a new entry in ALLOWED_PREFIXES. The _render-sources endpoint is already covered by the existing /api/v1/page prefix.
Acceptance Criteria
-
/api/v2/assetsadded toALLOWED_PREFIXES -
src/generated/spec.jsonregenerated against an instance that includes both endpoints - Both endpoints present in the generated spec
Additional Context
Depends on #36112 and #36102 being merged before the spec can be regenerated.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.