finos / finos/fluxnova-plugins

[Feature] Incorporate MCP Endpoint security with Fluxnova authorized

Open
#43 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
3
Forks
7
Avg merge
5d 4h
Merged PRs (30d)
3

Description

### Description of Problem

Provides security to MCP endpoints (/sse and /mcp) by provoding a basic credential check, using the Fluxnova engine's identity service, which then checks the user is authorized to query the resource that the invoked tool is attempting to retrieve.

### Potential Solutions

This feature has been party developed, but dropped due to maintainers not actively pursuing this feature. If anyone is keen to resurrect and maintain, see PR https://github.com/finos/fluxnova-plugins/pull/5

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the referenced PR #5 and tracing the /sse and /mcp MCP endpoints. Examine how the Fluxnova engine's identity service checks credentials and authorization for the resource an invoked tool retrieves. Done means the endpoints perform the described credential and resource-authorization checks, with the relevant behavior covered by the existing project tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
authentication, authorization, backend-api-design, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.