mirror of
https://github.com/openai/codex.git
synced 2026-10-26 18:38:47 +00:00
Max Stoiber
0a451911c3
App-server callers can supply arbitrary MCP request metadata. The direct egress policy covered the snake_case connector identity fields but omitted the camelCase variants used by app-server surfaces, allowing those reserved identities to bypass the boundary. Strip the three canonical camelCase variants and document the filtering contract for app-server clients.\n\nCover the policy at the real MCP wire boundary: configured direct servers keep benign caller metadata and negotiated sandbox state while dropping thread, turn, trace, plugin, and connector identity; hosted Codex Apps calls continue to receive authoritative thread and turn metadata.