mcp: validate initialize handshake response #92

Closed
opened 2026-07-05 14:13:35 +00:00 by the.auditor · 0 comments
Owner

In src/kronai/mcp.py:75-88, _send_initialize() receives the initialize response but doesn't validate it contains expected fields like serverInfo or protocolVersion. If the server returns an unexpected response (e.g., empty result), it silently continues.

Consider checking that result contains expected fields and raising MCPError if not.

From PR #88 review suggestion.

In `src/kronai/mcp.py:75-88`, `_send_initialize()` receives the initialize response but doesn't validate it contains expected fields like `serverInfo` or `protocolVersion`. If the server returns an unexpected response (e.g., empty result), it silently continues. Consider checking that `result` contains expected fields and raising `MCPError` if not. _From PR #88 review suggestion._
fuzzy closed this issue 2026-07-05 16:48:19 +00:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
thwap/kronai#92
No description provided.