saschamarkus-uberresearch commented on issue #66: URL: https://github.com/apache/solr-mcp/issues/66#issuecomment-4084163055
Besides implementing this I think it would also be helpful to recommend to use dedicated user roles in the README. For example pointing to the SOLR docs: https://solr.apache.org/guide/solr/latest/deployment-guide/rule-based-authorization-plugin.html This means the Solr admins are in charge and no configuration of the MCP server could mess anything up. Also having more than the minimal _.mcp.json_ example could help. It might look like this: `{ "mcpServers": { "solr-mcp": { "type": "http", "url": "http://localhost:8080/mcp"; } }, "permissions": { "allow": [ "mcp__solr-mcp__search", "mcp__solr-mcp__list-collections", "mcp__solr-mcp__get-collection-stats", "mcp__solr-mcp__check-health", "mcp__solr-mcp__get-schema" ], "deny": [ "mcp__solr-mcp__create-collection", "mcp__solr-mcp__index-json-documents", "mcp__solr-mcp__index-csv-documents", "mcp__solr-mcp__index-xml-documents" ] } }` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
