René's URL Explorer Experiment


Title: Python: Add models for the MCP server SDKs (`mcp`, `fastmcp`) by Alex-Hofer · Pull Request #22703 · github/codeql · GitHub

Open Graph Title: Python: Add models for the MCP server SDKs (`mcp`, `fastmcp`) by Alex-Hofer · Pull Request #22703 · github/codeql

X Title: Python: Add models for the MCP server SDKs (`mcp`, `fastmcp`) by Alex-Hofer · Pull Request #22703 · github/codeql

Description: CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security - Python: Add models for the MCP server SDKs (`mcp`, `fastmcp`) by Alex-Hofer · Pull Request #22703 · github/codeql

Open Graph Description: Implements the proposal in #22702. The observation there about py/xxe, py/xml-bomb and py/nosql-injection taking only RemoteFlowSource has since been fixed by #22822. MCP servers expose tools to LL...

X Description: Implements the proposal in #22702. The observation there about py/xxe, py/xml-bomb and py/nosql-injection taking only RemoteFlowSource has since been fixed by #22822. MCP servers expose tools to LL...

Opengraph URL: https://github.com/github/codeql/pull/22703

X: @github

direct link

Domain: github.com

react-profiling0
react-import-mapreact,react-dom,react-dom/client,react-dom/profiling,react-is,react-reconciler,react/compiler-runtime,react/jsx-dev-runtime,react/jsx-runtime,scheduler@d5750093facf
route-pattern/_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format)
route-controllervoltron_pull_requests_fragments
route-actionpull_request_layout
fetch-noncev2:fdee7042-c069-1b72-9eac-8e1ce0ee7641
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idC5D2:3E6155:9FCDD9:DCC077:6AF98EF1
html-safe-nonce98a06cb1c1b1c7c650e246c0935899a39abc23c7540507d1227c43c5b3993752
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJDNUQyOjNFNjE1NTo5RkNERDk6RENDMDc3OjZBRjk4RUYxIiwidmlzaXRvcl9pZCI6IjM4MDgwNTQ5NTE0NjA1NzI5MTMiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ==
visitor-hmacfbb348115d7a10436f2eb57cc49c6b13d000768143e84dc0a29bc64dc0c69f6c
hovercard-subject-tagpull_request:4685133580
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/pull_requests_fragments/pull_request_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/github/codeql/22703/pull_request_layout
twitter:imagehttps://opengraph.githubassets.com/984b21b570d8d293be1097b15e4f3174a745d94a1a70c48f924b7ea0bbbe5b65/github/codeql/pull/22703
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/984b21b570d8d293be1097b15e4f3174a745d94a1a70c48f924b7ea0bbbe5b65/github/codeql/pull/22703
og:image:altImplements the proposal in #22702. The observation there about py/xxe, py/xml-bomb and py/nosql-injection taking only RemoteFlowSource has since been fixed by #22822. MCP servers expose tools to LL...
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernameAlex-Hofer
hostnamegithub.com
expected-hostnamegithub.com
None612d3e6ffd693e7ea8d9fcf452370995872baef31d825b1fedef704cd3d24ac7
turbo-cache-controlno-cache
go-importgithub.com/github/codeql git https://github.com/github/codeql.git
octolytics-dimension-user_id9919
octolytics-dimension-user_logingithub
octolytics-dimension-repository_id143040428
octolytics-dimension-repository_nwogithub/codeql
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id143040428
octolytics-dimension-repository_network_root_nwogithub/codeql
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release072e34035c13c31543fba9f025cbbbda4210dae4
ui-targetfull
theme-color#1e2327
color-schemelight dark
react-app-namepull-requests

Links:

Skip to contenthttps://github.com/github/codeql/pull/22703#start-of-content
https://github.com/
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F22703
GitHubRepository hosting, code review, and collaborationhttps://github.com/platform
CopilotAI coding agent for tasks, projects, and automated workhttps://github.com/features/copilot
ActionsCI/CD and automationhttps://github.com/features/actions
Code QualityQuality analysis, fixes, and enforcementhttps://github.com/features/code-quality
CodespacesCloud development environmentshttps://github.com/features/codespaces
Code SecurityVulnerability detection and remediationhttps://github.com/security/advanced-security/code-security
Secret ProtectionSecret scanning and leak preventionhttps://github.com/security/advanced-security/secret-protection
All Featureshttps://github.com/features
Documentationhttps://docs.github.com/en
Traininghttps://learn.github.com/skills
Certificationshttps://learn.github.com/credentials
Build with Copilothttps://github.com/features/ai
Customize Copilothttps://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-copilot-overview
Integrationshttps://github.com/marketplace
Trending reposhttps://github.com/trending
GitHub Sponsorshttps://github.com/open-source/sponsors
Developer articleshttps://github.com/resources/articles
ChangelogYour source for the latest features, improvements, and fixes across GitHub products, all in one place.https://github.blog/changelog/
Enterpriseshttps://github.com/enterprise
Teamhttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
See all industrieshttps://github.com/solutions/industry
Why GitHubhttps://github.com/why-github
Customer Storieshttps://github.com/customer-stories
Business insightshttps://github.com/solutions/executive-insights
Trust Centerhttps://github.com/trust-center
GitHub Advanced SecurityEnterprise-grade code securityhttps://github.com/security/advanced-security
Copilot for businessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Documentationhttps://docs.github.com/en
Resource centerhttps://github.com/resources
Bloghttps://github.blog/
Events & webinarshttps://github.com/resources/events
Community Forumhttps://github.com/orgs/community/discussions
Customer Storieshttps://github.com/customer-stories
Integrationshttps://github.com/marketplace
Customer supporthttps://help.github.com/
Traininghttps://learn.github.com/skills
GitHub Statushttps://www.githubstatus.com/
Abouthttps://github.com/about
Partnershttps://github.com/partners
Changeloghttps://github.blog/changelog/
GitHub UniverseThe event for developers, by developers — talks, workshops, and what’s next for GitHub.https://githubuniverse.com/
Pricinghttps://github.com/pricing
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F22703
Sign uphttps://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=github%2Fcodeql
Reloadhttps://github.com/github/codeql/pull/22703
Reloadhttps://github.com/github/codeql/pull/22703
Reloadhttps://github.com/github/codeql/pull/22703
githubhttps://github.com/github
codeqlhttps://github.com/github/codeql
Codehttps://github.com/github/codeql
Issues1k (1k)https://github.com/github/codeql/issues
Pull requests516 (516)https://github.com/github/codeql/pulls
Discussionshttps://github.com/github/codeql/discussions
Actionshttps://github.com/github/codeql/actions
Projectshttps://github.com/github/codeql/projects
Security and qualityhttps://github.com/github/codeql/security
Insightshttps://github.com/github/codeql/pulse
https://github.com/github/codeql
owen-mchttps://github.com/owen-mc
github:mainhttps://github.com/github/codeql/tree/main
Alex-Hofer:python-mcp-modelshttps://github.com/Alex-Hofer/codeql/tree/python-mcp-models
Conversationhttps://github.com/github/codeql/pull/22703
Commits7 (7)https://github.com/github/codeql/pull/22703/commits
Checkshttps://github.com/github/codeql/pull/22703/checks
Findingshttps://github.com/github/codeql/pull/22703/findings
Files changedhttps://github.com/github/codeql/pull/22703/files
Python: Add models for the MCP server SDKs (mcp, fastmcp)https://github.com/github/codeql/pull/22703#top
owen-mchttps://github.com/owen-mc
github:mainhttps://github.com/github/codeql/tree/main
Alex-Hofer:python-mcp-modelshttps://github.com/Alex-Hofer/codeql/tree/python-mcp-models
https://github.com/Alex-Hofer
Alex-Hoferhttps://github.com/Alex-Hofer
Sep 30, 2026https://github.com/github/codeql/pull/22703#issue-5640125115
Please reload this pagehttps://github.com/github/codeql/pull/22703
#22702https://github.com/github/codeql/issues/22702
#22822https://github.com/github/codeql/pull/22822
#22810https://github.com/github/codeql/pull/22810
mcp-vulnbenchhttps://github.com/Alex-Hofer/mcp-vulnbench
Please reload this pagehttps://github.com/github/codeql/pull/22703
https://github.com/Alex-Hofer
Alex-Hoferhttps://github.com/Alex-Hofer
code ownerhttps://github.com/github/codeql/blob/22e050f8640f2c80aaa6b649addf2d982cc94093/CODEOWNERS#L18
September 30, 2026 02:52https://github.com/github/codeql/pull/22703#event-32130851734
https://github.com/apps/github-actions
github-actionshttps://github.com/apps/github-actions
documentation https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Adocumentation
Python https://github.com/github/codeql/issues?q=state%3Aopen%20label%3APython
Sep 30, 2026https://github.com/github/codeql/pull/22703#event-32131160907
https://github.com/jketema
jketemahttps://github.com/jketema
external-contribution https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Aexternal-contribution
Sep 30, 2026https://github.com/github/codeql/pull/22703#event-32169469499
https://github.com/Alex-Hofer
Alex-Hoferhttps://github.com/Alex-Hofer
Oct 3, 2026 https://github.com/github/codeql/pull/22703#ref-pullrequest-5693515986
JS: Add models for the MCP server SDKs and flow summaries for zod #22749 https://github.com/github/codeql/pull/22749
https://github.com/Tito0015
Tito0015https://github.com/Tito0015
Oct 4, 2026 https://github.com/github/codeql/pull/22703#ref-pullrequest-5696610430
Python: Model complementary MCP AST handler parameters as ai sources #22750 https://github.com/github/codeql/pull/22750
https://github.com/Alex-Hofer
Alex-Hoferhttps://github.com/Alex-Hofer
Oct 4, 2026 https://github.com/github/codeql/pull/22703#ref-issue-5640094952
Python: model MCP server handler parameters (mcp, fastmcp) as remote sources #22702 https://github.com/github/codeql/issues/22702
Alex-Hoferhttps://github.com/Alex-Hofer
October 15, 2026 11:55https://github.com/github/codeql/pull/22703#commits-pushed-c971b01
https://github.com/Alex-Hofer
Python: Add models for the MCP server SDKs (mcp, fastmcp)https://github.com/github/codeql/pull/22703/commits/c971b0147f2a817da73137ae604f3eb62c7153b8
c971b01https://github.com/github/codeql/pull/22703/commits/c971b0147f2a817da73137ae604f3eb62c7153b8
https://github.com/Alex-Hofer
Python: Use the ai threat model for MCP handler inputhttps://github.com/github/codeql/pull/22703/commits/1c9b2968ede3ed7455c15f90d93f4b87d9a50b58
1c9b296https://github.com/github/codeql/pull/22703/commits/1c9b2968ede3ed7455c15f90d93f4b87d9a50b58
github#22810https://github.com/github/codeql/pull/22810
https://github.com/Alex-Hofer
Alex-Hoferhttps://github.com/Alex-Hofer
force-pushedhttps://github.com/github/codeql/compare/f298591a65ed9aac83b3f56e2ce5f2a11d07eb64..1c9b2968ede3ed7455c15f90d93f4b87d9a50b58
f298591https://github.com/github/codeql/commit/f298591a65ed9aac83b3f56e2ce5f2a11d07eb64
1c9b296https://github.com/github/codeql/commit/1c9b2968ede3ed7455c15f90d93f4b87d9a50b58
Compare https://github.com/github/codeql/compare/f298591a65ed9aac83b3f56e2ce5f2a11d07eb64..1c9b2968ede3ed7455c15f90d93f4b87d9a50b58
October 15, 2026 10:18https://github.com/github/codeql/pull/22703#event-33321842827
https://github.com/Alex-Hofer
Alex-Hoferhttps://github.com/Alex-Hofer
Oct 15, 2026https://github.com/github/codeql/pull/22703#issuecomment-6189812296
#22749https://github.com/github/codeql/pull/22749
#22810https://github.com/github/codeql/pull/22810
#22822https://github.com/github/codeql/pull/22822
Please reload this pagehttps://github.com/github/codeql/pull/22703
https://github.com/Alex-Hofer
Merge branch 'main' into python-mcp-modelshttps://github.com/github/codeql/pull/22703/commits/8933961051f6d6b3918985fe9dcdca13a5b0dcd4
8933961https://github.com/github/codeql/pull/22703/commits/8933961051f6d6b3918985fe9dcdca13a5b0dcd4
https://github.com/Alex-Hofer
Alex-Hoferhttps://github.com/Alex-Hofer
Nov 2, 2026https://github.com/github/codeql/pull/22703#issuecomment-6589393908
#22749https://github.com/github/codeql/pull/22749
Please reload this pagehttps://github.com/github/codeql/pull/22703
https://github.com/owen-mc
owen-mchttps://github.com/owen-mc
Nov 4, 2026 https://github.com/github/codeql/pull/22703#pullrequestreview-5771701612
View reviewed changes https://github.com/github/codeql/pull/22703/files/8933961051f6d6b3918985fe9dcdca13a5b0dcd4
python/ql/lib/semmle/python/frameworks/fastmcp.model.ymlhttps://github.com/github/codeql/pull/22703/files/8933961051f6d6b3918985fe9dcdca13a5b0dcd4#diff-b11be957058e16a16cee58982dfbdddbe1f7195ac18a17656a287c05bceda7c1
owen-mchttps://github.com/owen-mc
Nov 4, 2026https://github.com/github/codeql/pull/22703#discussion_r4470070922
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/22703
Alex-Hoferhttps://github.com/Alex-Hofer
Nov 4, 2026https://github.com/github/codeql/pull/22703#discussion_r4471421774
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
f215487https://github.com/github/codeql/commit/f215487ce76132a8426f573a89a2184e0a3d33f2
#22750https://github.com/github/codeql/pull/22750
Please reload this pagehttps://github.com/github/codeql/pull/22703
Alex-Hoferhttps://github.com/Alex-Hofer
Nov 5, 2026https://github.com/github/codeql/pull/22703#discussion_r4480217587
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
3c696d2https://github.com/github/codeql/commit/3c696d21b28de3a78975a8c9270fb8f292a95983
Please reload this pagehttps://github.com/github/codeql/pull/22703
python/ql/lib/semmle/python/frameworks/mcp.model.ymlhttps://github.com/github/codeql/pull/22703/files/8933961051f6d6b3918985fe9dcdca13a5b0dcd4#diff-e04c639f6cf2c359598042dac0609cddd16b409c581a5cd20bcef4b2917aec20
owen-mchttps://github.com/owen-mc
Nov 4, 2026https://github.com/github/codeql/pull/22703#discussion_r4470073082
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/22703
Alex-Hoferhttps://github.com/Alex-Hofer
Nov 4, 2026https://github.com/github/codeql/pull/22703#discussion_r4471424458
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/22703
python/ql/lib/semmle/python/frameworks/mcp.model.ymlhttps://github.com/github/codeql/pull/22703/files/8933961051f6d6b3918985fe9dcdca13a5b0dcd4#diff-e04c639f6cf2c359598042dac0609cddd16b409c581a5cd20bcef4b2917aec20
Please reload this pagehttps://github.com/github/codeql/pull/22703
python/ql/lib/semmle/python/frameworks/fastmcp.model.ymlhttps://github.com/github/codeql/pull/22703/files/8933961051f6d6b3918985fe9dcdca13a5b0dcd4#diff-b11be957058e16a16cee58982dfbdddbe1f7195ac18a17656a287c05bceda7c1
Please reload this pagehttps://github.com/github/codeql/pull/22703
python/ql/lib/semmle/python/frameworks/fastmcp.model.ymlhttps://github.com/github/codeql/pull/22703/files/8933961051f6d6b3918985fe9dcdca13a5b0dcd4#diff-b11be957058e16a16cee58982dfbdddbe1f7195ac18a17656a287c05bceda7c1
Please reload this pagehttps://github.com/github/codeql/pull/22703
python/ql/lib/semmle/python/frameworks/fastmcp.model.ymlhttps://github.com/github/codeql/pull/22703/files/8933961051f6d6b3918985fe9dcdca13a5b0dcd4#diff-b11be957058e16a16cee58982dfbdddbe1f7195ac18a17656a287c05bceda7c1
Please reload this pagehttps://github.com/github/codeql/pull/22703
https://github.com/Alex-Hofer
Python: Model MCP handler parameters in QLhttps://github.com/github/codeql/pull/22703/commits/f215487ce76132a8426f573a89a2184e0a3d33f2
f215487https://github.com/github/codeql/pull/22703/commits/f215487ce76132a8426f573a89a2184e0a3d33f2
https://github.com/apps/copilot-pull-request-reviewer
Copilothttps://github.com/apps/copilot-pull-request-reviewer
November 4, 2026 18:12https://github.com/github/codeql/pull/22703#event-35159784121
started reviewinghttps://github.com/github/codeql/sessions/e2cfeba7-1a2d-476e-bb41-c0cdbdb0e06a
Alex-Hoferhttps://github.com/Alex-Hofer
November 4, 2026 18:12https://github.com/github/codeql/pull/22703#event-35159842596
View session https://github.com/github/codeql/sessions/e2cfeba7-1a2d-476e-bb41-c0cdbdb0e06a
https://github.com/apps/copilot-pull-request-reviewer
Copilothttps://github.com/apps/copilot-pull-request-reviewer
Nov 4, 2026 https://github.com/github/codeql/pull/22703#pullrequestreview-5773620013
View reviewed changes https://github.com/github/codeql/pull/22703/files/f215487ce76132a8426f573a89a2184e0a3d33f2
Copilothttps://github.com/apps/copilot-pull-request-reviewer
https://github.com/github/codeql/pull/22703#pullrequestreview-5773620013
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Avoid treating metadata and Literal values as context typeshttps://github.com/github/codeql/pull/22703#discussion_r4471599991
Resolve aliased SDK Context annotationshttps://github.com/github/codeql/pull/22703#discussion_r4471600090
Exclude the first parameter only for bound handlershttps://github.com/github/codeql/pull/22703#discussion_r4471600158
Please reload this pagehttps://github.com/github/codeql/pull/22703
python/ql/lib/semmle/python/frameworks/Mcp.qllhttps://github.com/github/codeql/pull/22703/files/f215487ce76132a8426f573a89a2184e0a3d33f2#diff-daaccb2759cc0d3e13a2adc46b0459b93d5ae6459eef3f58163226253f8666a9
Please reload this pagehttps://github.com/github/codeql/pull/22703
python/ql/lib/semmle/python/frameworks/Mcp.qllhttps://github.com/github/codeql/pull/22703/files/f215487ce76132a8426f573a89a2184e0a3d33f2#diff-daaccb2759cc0d3e13a2adc46b0459b93d5ae6459eef3f58163226253f8666a9
Please reload this pagehttps://github.com/github/codeql/pull/22703
python/ql/lib/semmle/python/frameworks/Mcp.qllhttps://github.com/github/codeql/pull/22703/files/f215487ce76132a8426f573a89a2184e0a3d33f2#diff-daaccb2759cc0d3e13a2adc46b0459b93d5ae6459eef3f58163226253f8666a9
Please reload this pagehttps://github.com/github/codeql/pull/22703
https://github.com/Alex-Hofer
Alex-Hoferhttps://github.com/Alex-Hofer
owen-mchttps://github.com/owen-mc
November 4, 2026 22:47https://github.com/github/codeql/pull/22703#event-35183187398
https://github.com/Alex-Hofer
Python: Refine the MCP Context and receiver exclusionshttps://github.com/github/codeql/pull/22703/commits/3c696d21b28de3a78975a8c9270fb8f292a95983
3c696d2https://github.com/github/codeql/pull/22703/commits/3c696d21b28de3a78975a8c9270fb8f292a95983
https://github.com/owen-mc
owen-mchttps://github.com/owen-mc
Copilothttps://github.com/apps/copilot-pull-request-reviewer
November 5, 2026 14:11https://github.com/github/codeql/pull/22703#event-35249167091
started reviewinghttps://github.com/github/codeql/sessions/21908d30-1def-4aa5-b48d-ed5f66a09df3
owen-mchttps://github.com/owen-mc
November 5, 2026 14:11https://github.com/github/codeql/pull/22703#event-35249222618
View session https://github.com/github/codeql/sessions/21908d30-1def-4aa5-b48d-ed5f66a09df3
https://github.com/apps/copilot-pull-request-reviewer
Copilothttps://github.com/apps/copilot-pull-request-reviewer
Nov 5, 2026 https://github.com/github/codeql/pull/22703#pullrequestreview-5786541658
View reviewed changes https://github.com/github/codeql/pull/22703/files/3c696d21b28de3a78975a8c9270fb8f292a95983
Copilothttps://github.com/apps/copilot-pull-request-reviewer
https://github.com/github/codeql/pull/22703#pullrequestreview-5786541658
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
https://gofastmcp.com/servers/dependency-injectionhttps://gofastmcp.com/servers/dependency-injection
Exclude the first parameter only for bound handlershttps://github.com/github/codeql/pull/22703#discussion_r4471600158
Resolve aliased SDK Context annotationshttps://github.com/github/codeql/pull/22703#discussion_r4471600090
Avoid treating metadata and Literal values as context typeshttps://github.com/github/codeql/pull/22703#discussion_r4471599991
Please reload this pagehttps://github.com/github/codeql/pull/22703
https://github.com/apps/github-advanced-security
github-advanced-securityhttps://github.com/apps/github-advanced-security
Nov 5, 2026 https://github.com/github/codeql/pull/22703#pullrequestreview-5787060872
View reviewed changes https://github.com/github/codeql/pull/22703/files/3c696d21b28de3a78975a8c9270fb8f292a95983
python/ql/lib/semmle/python/frameworks/Mcp.qllhttps://github.com/github/codeql/pull/22703/files/3c696d21b28de3a78975a8c9270fb8f292a95983#diff-daaccb2759cc0d3e13a2adc46b0459b93d5ae6459eef3f58163226253f8666a9
Please reload this pagehttps://github.com/github/codeql/pull/22703
https://github.com/owen-mc
owen-mchttps://github.com/owen-mc
Nov 5, 2026 https://github.com/github/codeql/pull/22703#pullrequestreview-5787687448
View reviewed changes https://github.com/github/codeql/pull/22703/files/3c696d21b28de3a78975a8c9270fb8f292a95983
owen-mchttps://github.com/owen-mc
https://github.com/github/codeql/pull/22703#pullrequestreview-5787687448
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/22703
python/ql/lib/semmle/python/frameworks/Mcp.qllhttps://github.com/github/codeql/pull/22703/files/3c696d21b28de3a78975a8c9270fb8f292a95983#diff-daaccb2759cc0d3e13a2adc46b0459b93d5ae6459eef3f58163226253f8666a9
Please reload this pagehttps://github.com/github/codeql/pull/22703
python/ql/lib/semmle/python/frameworks/Mcp.qllhttps://github.com/github/codeql/pull/22703/files/3c696d21b28de3a78975a8c9270fb8f292a95983#diff-daaccb2759cc0d3e13a2adc46b0459b93d5ae6459eef3f58163226253f8666a9
Please reload this pagehttps://github.com/github/codeql/pull/22703
https://github.com/Alex-Hofer
Python: Resolve MCP Context names and typing wrappers through importshttps://github.com/github/codeql/pull/22703/commits/9f19700417d07cdb56e929f06651155d011b9095
9f19700https://github.com/github/codeql/pull/22703/commits/9f19700417d07cdb56e929f06651155d011b9095
https://github.com/Alex-Hofer
Alex-Hoferhttps://github.com/Alex-Hofer
owen-mchttps://github.com/owen-mc
November 5, 2026 21:03https://github.com/github/codeql/pull/22703#event-35286632791
https://github.com/owen-mc
owen-mchttps://github.com/owen-mc
Nov 6, 2026 https://github.com/github/codeql/pull/22703#pullrequestreview-5798313813
View reviewed changes https://github.com/github/codeql/pull/22703/files/9f19700417d07cdb56e929f06651155d011b9095
owen-mchttps://github.com/owen-mc
https://github.com/github/codeql/pull/22703#pullrequestreview-5798313813
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/22703
python/ql/test/library-tests/frameworks/fastmcp/aliases.pyhttps://github.com/github/codeql/pull/22703/files/9f19700417d07cdb56e929f06651155d011b9095#diff-b5f205c80b04fae260ed67fa49fc8eedbcdf47e0788be515f562e0e12e955005
Please reload this pagehttps://github.com/github/codeql/pull/22703
python/ql/lib/semmle/python/frameworks/Mcp.qllhttps://github.com/github/codeql/pull/22703/files/9f19700417d07cdb56e929f06651155d011b9095#diff-daaccb2759cc0d3e13a2adc46b0459b93d5ae6459eef3f58163226253f8666a9
Please reload this pagehttps://github.com/github/codeql/pull/22703
https://github.com/Alex-Hofer
Python: Resolve quoted typing wrappers of MCP Context through importshttps://github.com/github/codeql/pull/22703/commits/ee09e6eaae88bffa4e32560166fc37270768c124
ee09e6ehttps://github.com/github/codeql/pull/22703/commits/ee09e6eaae88bffa4e32560166fc37270768c124
https://github.com/Alex-Hofer
Alex-Hoferhttps://github.com/Alex-Hofer
owen-mchttps://github.com/owen-mc
November 9, 2026 21:02https://github.com/github/codeql/pull/22703#event-35614193393
https://github.com/owen-mc
owen-mchttps://github.com/owen-mc
Nov 11, 2026 https://github.com/github/codeql/pull/22703#pullrequestreview-5862157382
View reviewed changes https://github.com/github/codeql/pull/22703/files/ee09e6eaae88bffa4e32560166fc37270768c124
owen-mchttps://github.com/owen-mc
https://github.com/github/codeql/pull/22703#pullrequestreview-5862157382
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/22703
https://github.com/owen-mc
owen-mchttps://github.com/owen-mc
a08e2bbhttps://github.com/github/codeql/commit/a08e2bb953662431343bd9f9a283cc7ef85f4f81
Nov 12, 2026https://github.com/github/codeql/pull/22703#event-35897359320
Please reload this pagehttps://github.com/github/codeql/pull/22703
https://github.co/hiddenchars
https://github.com/github/codeql/pull/{{ revealButtonHref }}
Sign up for freehttps://github.com/join?source=comment-repo
Sign in to commenthttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F22703
Copilot code review https://github.com/apps/copilot-pull-request-reviewer
Copilot https://github.com/apps/copilot-pull-request-reviewer
Learn more about Copilot code review.https://gh.io/copilot-code-review-docs
https://github.com/github/codeql/pull/22703/files/3c696d21b28de3a78975a8c9270fb8f292a95983
https://github.com/owen-mc
owen-mc https://github.com/owen-mc
https://github.com/github/codeql/pull/22703/files/ee09e6eaae88bffa4e32560166fc37270768c124
https://github.com/apps/github-advanced-security
github-advanced-security[bot] https://github.com/apps/github-advanced-security
https://github.com/github/codeql/pull/22703/files/3c696d21b28de3a78975a8c9270fb8f292a95983
Please reload this pagehttps://github.com/github/codeql/pull/22703
documentation https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Adocumentation
external-contribution https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Aexternal-contribution
Python https://github.com/github/codeql/issues?q=state%3Aopen%20label%3APython
Please reload this pagehttps://github.com/github/codeql/pull/22703
https://github.com/Alex-Hofer
https://github.com/apps/github-advanced-security
https://github.com/owen-mc
https://github.com/apps/copilot-pull-request-reviewer
https://github.com/jketema
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.