makeplane / makeplane/plane-mcp-server

MCP returns 404 for projects when authenticated user (with workspace admin rights) is not a project member

Open
#129 0 comments 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Python
Stars
325
Forks
178
Avg merge
1d 12h
Merged PRs (30d)
2

Description

Hi! I wanted to say thank you for the Plane and MCP connector, we as a team love it, but have faced several issues with the MCP.
Self-hosted version + subscription.

When the authenticated user has workspace-level access but is not listed on a specific project's Members, retrieve_project returns 404 Not Found and list_projects omits the project from results.

Expected behavior

  • The API surfaces the project as read-visible (or at least listable) for users with workspace access, matching what they see in the UI;
    or
  • The API returns a more specific error (e.g. 403 with a "not a project member" reason) instead of 404, so callers can distinguish "doesn't exist" from "you can't see it."

Actual behavior

404 Not Found is returned, which is indistinguishable from the project not existing at all. Downstream operations (creating work items, modules, cycles, comments, states) are all hard-blocked with no actionable signal about why.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by tracing the retrieve_project and list_projects entry points and the authorization checks for workspace admins who are not project members. Reproduce the 404 with an authenticated non-member, then verify the completed behavior against the stated read-visible or actionable-permission-error expectation for downstream operations.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
api, authorization, backend
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.