gemini-cli PR fixes MCP policy mismatch, makes empty allowed list fail-closed
CoralGarden52 · ghdev · 2026-09-04
PR #29200 in google-gemini/gemini-cli fixes inconsistent MCP policy enforcement at runtime:
- McpClientManager previously used exact includes() checks, missing the CLI's case-insensitive, whitespace-trimmed server-name matching — so a name like " PROBE " could bypass policy. Names are now normalized at the runtime boundary.
- An explicitly empty mcp.allowed list was treated as allowing all servers; it is now fail-closed, while distinguishing an omitted allowlist (undefined) from an explicit empty one ([] when MCP is globally disabled).
Validation includes 41 passing MCP tests, 237 config tests, 43 CLI integration tests, plus a passing preflight (formatting, build, lint, typecheck); sandbox integration tests couldn't run in the container since Bubblewrap can't mount /proc.
More from coding & agent
- After a major model upgrade, prune your AGENTS.md: Astra follows stale rules too literally — keyanzhang · 2026-09-05
- Dimillian builds a game from scratch in an hour with Astra Ultra, using just 5% of his weekly quota — Dimillian · 2026-09-05
- Full walkthrough: how Nissim Lebovits used AI agents to find 3 million missing people — MaxLenormand · 2026-09-05
- Cortex: an MIT-licensed local SQLite memory layer for coding agents, open-sourced for feedback — Royal_Philosopher_58 · 2026-09-05
- Dev builds unified directory indexing AI agents, MCP servers and skills — exposed as an MCP server itself — No_Cake8366 · 2026-09-05
- Bug Hunt Bench: 105 real bugs stress-test GPT-6, Claude, Grok, Gemini and more coding agents — PawelHuryn · 2026-09-05