coolify/app/Http/Middleware
Andras Bacsai 7ab16ad7b5 feat(mcp): add MCP server with read-only tools for Coolify resources
Add Model Context Protocol server exposing Coolify infrastructure data
to AI assistants. Includes tools for listing/fetching servers, projects,
applications, databases, and services, scoped to authenticated team tokens.

- Add CoolifyServer with 10 read-only tools (list/get for all resource types)
- Add BuildsResponse and ResolvesTeam traits for shared tool logic
- Add EnsureMcpEnabled middleware guarding /mcp routes
- Add enable/disable MCP API endpoints (root-only)
- Add is_mcp_server_enabled toggle in instance settings and advanced UI
- Add migration for is_mcp_server_enabled column
- Add feature tests for MCP endpoints and toggle API
- Scrub sensitive keys (passwords, tokens, raw IDs) from all responses
2026-04-29 10:30:43 +02:00
..
ApiAbility.php feat(observability): add structured audit log channel for API and webhook events 2026-04-28 14:50:37 +02:00
ApiAllowed.php refactor(dns-validation): rename DNS validation functions for consistency and clarity, and remove unused code 2025-09-09 09:00:35 +02:00
ApiSensitiveData.php fix: root + read:sensive could read senstive data with a middlewarew 2024-12-09 11:10:35 +01:00
Authenticate.php init of v4 🌮 2023-03-17 15:33:48 +01:00
CanAccessTerminal.php refactor(auth): simplify access control logic in CanAccessTerminal and ServerPolicy by allowing all users to perform actions 2025-08-28 10:48:24 +02:00
CanCreateResources.php feat(acl): Change views/backend code to able to use proper ACL's later on. Currently it is not enabled. 2025-08-26 10:27:38 +02:00
CanUpdateResource.php feat(acl): Change views/backend code to able to use proper ACL's later on. Currently it is not enabled. 2025-08-26 10:27:38 +02:00
CheckForcePasswordReset.php chore: prepare for PR 2026-02-24 10:17:16 +01:00
DecideWhatToDoWithUser.php fix(team): improve team retrieval and session handling for users 2025-12-28 14:50:59 +01:00
EncryptCookies.php init of v4 🌮 2023-03-17 15:33:48 +01:00
EnsureMcpEnabled.php feat(mcp): add MCP server with read-only tools for Coolify resources 2026-04-29 10:30:43 +02:00
PreventRequestsDuringMaintenance.php Fix styling 2024-06-10 20:43:34 +00:00
RedirectIfAuthenticated.php Fix styling 2024-06-10 20:43:34 +00:00
TrimStrings.php init of v4 🌮 2023-03-17 15:33:48 +01:00
TrustHosts.php fix(subscription): harden quantity updates and proxy trust behavior 2026-03-03 12:28:16 +01:00
TrustProxies.php fix(subscription): harden quantity updates and proxy trust behavior 2026-03-03 12:28:16 +01:00
ValidateSignature.php init of v4 🌮 2023-03-17 15:33:48 +01:00
VerifyCsrfToken.php fix(webhooks): exclude webhook routes from CSRF protection (#6200) 2025-07-18 19:04:08 +02:00