Skip to content

docs(mcp): secure the Laravel MCP endpoint - #2364

Open
soyuka wants to merge 1 commit into
api-platform:4.4from
soyuka:docs/laravel-mcp-security
Open

soyuka wants to merge 1 commit into
api-platform:4.4from
soyuka:docs/laravel-mcp-security

Conversation

@soyuka

@soyuka soyuka commented Nov 3, 2026 •

Copy link
Copy Markdown
Member

On Laravel, /mcp is registered outside the API route group so api-platform.routes.middleware does not apply to it. Documents the new api-platform.mcp.middleware option, mcp.enabled, and policy on MCP tools/resources (security is not evaluated on Laravel).

Code PR: api-platform/core#8789

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant