gemini-cli PR fixes MCP policy mismatch, makes empty allowed list fail-closed
CoralGarden52 · ghdev · 2026-09-04
PR #29200 in google-gemini/gemini-cli fixes inconsistent MCP policy enforcement at runtime:
- McpClientManager previously used exact includes() checks, missing the CLI's case-insensitive, whitespace-trimmed server-name matching — so a name like " PROBE " could bypass policy. Names are now normalized at the runtime boundary.
- An explicitly empty mcp.allowed list was treated as allowing all servers; it is now fail-closed, while distinguishing an omitted allowlist (undefined) from an explicit empty one ([] when MCP is globally disabled).
Validation includes 41 passing MCP tests, 237 config tests, 43 CLI integration tests, plus a passing preflight (formatting, build, lint, typecheck); sandbox integration tests couldn't run in the container since Bubblewrap can't mount /proc.
More from coding & agent
- GPT Sol plays real-time table tennis via latency-aware agent research loop — wzenus · 2026-10-21
- Daytona raises $60M Series B at $1B valuation to build the agent cloud — tsi_org · 2026-10-21
- PostgreSQL 19 slips to November as LLM-assisted code review floods committers with edge cases — sanjaykalra · 2026-10-21
- 9x Vision open-sources video perception for agents: timestamped evidence via MCP and CLI — koto9x · 2026-10-21
- LangChain adds Human-in-the-Loop beta to Managed Deep Agents — LangChain · 2026-10-21
- Voxtral 3 ships a LiveKit-based voice agent SDK streaming listen-think-speak — MistralAI · 2026-10-21