activeadmin_mcp 0.0.2 → 0.0.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e336c562299eb5de7192243106f42dc18602589811fff5eb0282f12b605ea9b8
-  data.tar.gz: 006f6aac09bceb97605517a9b1b7346a4aef6fc2ddc4c59ab48b36b658825078
+  metadata.gz: 1d97e042cb6e4af51f5939d4edd39a96f7193ece948a05a70dd8e18851f1bc85
+  data.tar.gz: 6b91b93d2d0511f3bea310f62044589eb35b90358547e942d379be214582d5e7
 SHA512:
-  metadata.gz: 602940dbd9eb2a0337220672258f343aff84d0851eaec4b0199b38cb99f843adca48ee085ab201ed896ec29f260fe5e8ae6a8844b567990611e4c866d3abd05f
-  data.tar.gz: 54e2309b725add92b02af4ebbaefdafd5cfa8c349890211c22f0bb391f00863764e89cf50f7e5f6ace5f293962f473ad75f5197f7813702b939cfc2dc95d5b9d
+  metadata.gz: 6714a33bbef7072a22f067f422837e6ccf88ebd6a835157c8ffa8fff5487791ee2494fbcd1316ac4ca65c9767e53ac6e48a7c672e84846615fb77af29b507080
+  data.tar.gz: fb49f14f716cd9c5a5e0b9ca80c546adaaa7fcab15b8867965c7d823084f456580982270185c65861477c11840c219cbdf41fd676a597c2b39c4835ec7d0f5f4

data/README.md

@@ -21,11 +21,17 @@ The server is a Rails engine mounted inside your application (by default at
 - **Queries use Ransack.** The `query` tool passes its arguments straight to
   [Ransack](https://activerecord-hackery.github.io/ransack/), the same search
   library ActiveAdmin uses for filtering.
+- **Reads go through ActiveAdmin too.** `list_resources` and `query` run through
+  the same authorization adapter (CanCanCan, Pundit, etc.) as the authenticated
+  MCP user: resources the user cannot read are hidden from the listing and
+  refused by `query`, and every query is scoped with the adapter's
+  `scope_collection`, so the MCP user only ever sees the records they could see
+  in the admin UI. With ActiveAdmin's default adapter every check passes, so
+  applications without an authorization adapter are unaffected.
 - **Writes go through ActiveAdmin.** The `update` tool only writes fields
   allowed by the resource's `permit_params`, refuses resources that don't
   register the `update` action, and runs every change through your
-  authorization adapter (CanCanCan, Pundit, etc.) as the authenticated MCP
-  user.
+  authorization adapter as the authenticated MCP user.
 - **Authentication is optional but built in.** Enable Bearer-token auth and the
   installer adds an "MCP Tokens" management page to your ActiveAdmin panel.
 
@@ -57,8 +63,8 @@ read/query setup without authentication.
 
 | Tool | Description |
 |------|-------------|
-| `list_resources` | List every ActiveAdmin resource along with its attributes. |
-| `query` | Query a resource using Ransack syntax (`limit` defaults to 25, capped at 100). |
+| `list_resources` | List the ActiveAdmin resources the current user may read, along with their attributes. |
+| `query` | Query a resource the current user may read, using Ransack syntax, scoped to the records they may access (`limit` defaults to 25, capped at 100). |
 | `update` | Update an existing record, honouring ActiveAdmin's permitted params and authorization. |
 
 ### Query examples

data/lib/activeadmin_mcp/authorization.rb

@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+module ActiveadminMcp
+  # Applies a resource's ActiveAdmin authorization adapter to MCP tool calls, so
+  # reads, listings and writes obey the same rules as the admin UI.
+  #
+  # ActiveAdmin's default adapter authorizes every action and returns collections
+  # unchanged, so applications without an authorization adapter are unaffected.
+  # Applications that configure one (CanCanCan via `cancan_ability_class`, Pundit,
+  # a custom adapter, ...) get their policy enforced on every path.
+  class Authorization
+    READ = :read
+
+    def self.for(config, current_user)
+      adapter_class = config.namespace.authorization_adapter
+      adapter_class = adapter_class.constantize if adapter_class.is_a?(String)
+      new(adapter_class.new(config, current_user))
+    end
+
+    def initialize(adapter)
+      @adapter = adapter
+    end
+
+    def authorized?(action, subject)
+      @adapter.authorized?(action, subject)
+    end
+
+    def scope_collection(collection, action = READ)
+      @adapter.scope_collection(collection, action)
+    end
+  end
+end

data/lib/activeadmin_mcp/record_updater.rb

@@ -53,9 +53,7 @@ module ActiveadminMcp
     end
 
     def authorized?(config, record)
-      adapter_class = config.namespace.authorization_adapter
-      adapter_class = adapter_class.constantize if adapter_class.is_a?(String)
-      adapter_class.new(config, @current_user).authorized?(UPDATE, record)
+      Authorization.for(config, @current_user).authorized?(UPDATE, record)
     end
 
     # Resolves the fields we may write, accepting exactly what the admin form

data/lib/activeadmin_mcp/request_handler.rb

@@ -44,12 +44,15 @@ module ActiveadminMcp
         tools: [
           {
             name: "list_resources",
-            description: "List all ActiveAdmin resources with their attributes",
+            description: "List the ActiveAdmin resources the authenticated user is authorized " \
+                         "to read, with their attributes",
             inputSchema: { type: "object", properties: {} },
           },
           {
             name: "query",
-            description: "Query an ActiveAdmin resource using Ransack syntax",
+            description: "Query an ActiveAdmin resource using Ransack syntax. Respects ActiveAdmin " \
+                         "authorization: the resource must be readable by the authenticated user, " \
+                         "and results are scoped to the records they may access.",
             inputSchema: {
               type: "object",
               properties: {
@@ -93,18 +96,21 @@ module ActiveadminMcp
     end
 
     def tool_list_resources
-      { resources: ResourceRegistry.all }
+      entries = ResourceRegistry.resources.select { |entry| authorized_to_read?(entry) }
+      { resources: entries.map { |entry| ResourceRegistry.resource_info(entry) } }
     end
 
     def tool_query(args)
       resource = ResourceRegistry.find(args["resource"])
       return { error: "Resource not found: #{args['resource']}" } unless resource
+      return { error: "Not authorized to query #{resource[:name]}" } unless authorized_to_read?(resource)
 
       limit = [args["limit"] || 25, 100].min
       q = args["q"] || {}
 
-      records = resource[:model].ransack(q).result.limit(limit)
-      { resource: resource[:name], count: records.size, records: records.as_json }
+      relation = resource[:model].ransack(q).result
+      records = authorization(resource).scope_collection(relation, Authorization::READ).limit(limit)
+      { resource: resource[:name], count: records.size, records: filter_sensitive(records.as_json) }
     end
 
     def tool_update(args)
@@ -119,6 +125,21 @@ module ActiveadminMcp
                    .call(id: args["id"], attributes: attributes)
     end
 
+    def authorized_to_read?(resource)
+      authorization(resource).authorized?(Authorization::READ, resource[:model])
+    end
+
+    def authorization(resource)
+      Authorization.for(resource[:config], @current_user)
+    end
+
+    def filter_sensitive(records)
+      sensitive = ResourceRegistry.sensitive_attributes
+      Array(records).map do |record|
+        record.is_a?(Hash) ? record.except(*sensitive) : record
+      end
+    end
+
     def success(id, result)
       { jsonrpc: "2.0", id: id, result: result }
     end

data/lib/activeadmin_mcp/resource_registry.rb

@@ -4,14 +4,28 @@ module ActiveadminMcp
   module ResourceRegistry
     class << self
       def all
-        discover.map { |r| resource_info(r) }
+        resources.map { |entry| resource_info(entry) }
+      end
+
+      def resources
+        discover.map { |r| entry(r) }
       end
 
       def find(name)
-        resource = discover.find { |r| r.resource_class.name == name }
-        return unless resource
+        resources.find { |entry| entry[:name] == name }
+      end
 
-        { name: resource.resource_class.name, model: resource.resource_class, config: resource }
+      def resource_info(entry)
+        klass = entry[:model]
+        {
+          name: klass.name,
+          table: klass.table_name,
+          attributes: klass.column_names - sensitive_attributes,
+        }
+      end
+
+      def sensitive_attributes
+        %w[encrypted_password password_digest reset_password_token api_key secret]
       end
 
       private
@@ -26,17 +40,8 @@ module ActiveadminMcp
         end || []
       end
 
-      def resource_info(resource)
-        klass = resource.resource_class
-        {
-          name: klass.name,
-          table: klass.table_name,
-          attributes: klass.column_names - sensitive_attributes,
-        }
-      end
-
-      def sensitive_attributes
-        %w[encrypted_password password_digest reset_password_token api_key secret]
+      def entry(resource)
+        { name: resource.resource_class.name, model: resource.resource_class, config: resource }
       end
     end
   end

data/lib/activeadmin_mcp/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module ActiveadminMcp
-  VERSION = "0.0.2"
+  VERSION = "0.0.3"
 end

data/lib/activeadmin_mcp.rb

@@ -2,6 +2,7 @@
 
 require_relative "activeadmin_mcp/version"
 require_relative "activeadmin_mcp/configuration"
+require_relative "activeadmin_mcp/authorization"
 require_relative "activeadmin_mcp/resource_registry"
 require_relative "activeadmin_mcp/form_field_collector"
 require_relative "activeadmin_mcp/record_updater"

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: activeadmin_mcp
 version: !ruby/object:Gem::Version
-  version: 0.0.2
+  version: 0.0.3
 platform: ruby
 authors:
 - harunkumars
@@ -95,6 +95,7 @@ files:
 - app/models/activeadmin_mcp/api_token.rb
 - config/routes.rb
 - lib/activeadmin_mcp.rb
+- lib/activeadmin_mcp/authorization.rb
 - lib/activeadmin_mcp/configuration.rb
 - lib/activeadmin_mcp/engine.rb
 - lib/activeadmin_mcp/form_field_collector.rb