server.json
1 field changed
- version
-
0.3.00.4.0
Microsoft Office changelog
io.github.mindstone/mcp-server-office
2 changes recorded. MCP Harbor re-reads this listing from the official registry every six hours and asks the live server what it exposes, and keeps what changed between one look and the next.
-
AGENTS.md +1 −1
https://raw.githubusercontent.com/mindstone/mcp-servers/HEAD/AGENTS.md
− 5. File-reading and file-uploading connectors constrain reads to `MCP_WORKSPACE_PATH` (or `os.tmpdir()`) using canonical-prefix containment that handles symlinked roots. Do not replace with substring checks or non-canonical `startsWith`. The same canonical-prefix discipline applies to download targets and any path joined from external input. **Approved exception (openai-image only, 2026-07-25):** reads **and generated-image writes** may resolve through a symlink whose canonical target lands insi+ 5. When the client negotiates experimental `files/readModes` version 1, file-reading and file-uploading connectors use only the canonical path authorized for the concrete operand in that request's `files/readMode` metadata, with no independent root containment or raw-input symlink refusal. Missing or malformed request modes and missing central operands fail closed. File type, size, and descriptor identity checks remain in place. Standalone clients (including clients that do not negotiate version