activerecord-mcp 0.1.0 → 0.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c9497890ce1878eb9de6a624e8db95ecaa6e5b8e6d011e1392757cd62630d31f
-  data.tar.gz: a6910fcd4b686d11a5eb5e99dd57cea4b9fbb5fde7120d26d387a16f7ccada13
+  metadata.gz: 133bbaee4fe93f387ffcca1b1a7b32e5d661ee97b5c260cafaaf51dfc0564f96
+  data.tar.gz: f8e4425ee88cb23810391f01c8ab087692095f424adf0888da51d61ef107e3b4
 SHA512:
-  metadata.gz: e3f176ad0d260adecf0ebd94229ad1bd81a8ca37613efc96883c32f1bcfe057c9ad5888bce9b5ed45a25b3062842e3e037ace65a95d665d7dcc10717abfc74b1
-  data.tar.gz: 1608b80a2888a30830ca9d2b96c3b305b32e5880702bc456b990f032d83a4b74a3594f90bcef36193b9c0885aa4fabe1d295ef9ffaf91b6ff402bc180ec009b5
+  metadata.gz: 452333fc726756a40787d8d02d6ca353d0464fb289db354543eef426283d5ad6e4c5bffd1b914e6f9f86e81db3e38558c61ef8685d917ba51950e5f8a94ea89f
+  data.tar.gz: cd72dc9e527051cc0cb47f74db4e7f08eb928f7ae13218a69415466580ece88a2bbf9cb1ef2b4b111d5197a0bbc3c3573f021c6ea54792fcc3d61cd433a30158

data/.ruby-version

@@ -0,0 +1 @@
+3.3.4

data/CHANGELOG.md

@@ -6,6 +6,14 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
 ## [Unreleased]
 
+## [0.1.1] - 2026-05-23
+
+### Fixed
+
+- `describe_model` now routes column and association output through `ColumnPolicy`, so `schema_file` allowlists are correctly respected (previously all columns were exposed regardless of allowlist)
+- Associations pointing to denied or inaccessible models are now filtered from `describe_model` output
+- Auth failures (invalid token, insufficient scope) are now logged via `Rails.logger.warn` with request method, path, client IP, and rejection reason
+
 ## [0.1.0] - 2026-05-23
 
 ### Added

data/README.md

@@ -1,6 +1,6 @@
 # activerecord-mcp
 
-[![CI](https://github.com/pauloancheta/rails-mcp/actions/workflows/main.yml/badge.svg)](https://github.com/pauloancheta/rails-mcp/actions/workflows/main.yml)
+[![CI](https://github.com/pauloancheta/activerecord-mcp/actions/workflows/main.yml/badge.svg)](https://github.com/pauloancheta/activerecord-mcp/actions/workflows/main.yml)
 
 The read-only MCP server Rails developers have been looking for.
 
@@ -130,4 +130,4 @@ bundle install
 bundle exec rake test
 ```
 
-Bug reports and pull requests welcome at https://github.com/pauloancheta/rails-mcp.
+Bug reports and pull requests welcome at https://github.com/pauloancheta/activerecord-mcp.

data/lib/rails_mcp/auth/token_validator.rb

@@ -17,13 +17,17 @@ module RailsMcp
         return @app.call(env) if request.path.start_with?(WELL_KNOWN_PREFIX)
 
         token_string = extract_bearer_token(env)
-        return unauthorized("Bearer token required") if token_string.nil?
+        return log_and_reject(request, :unauthorized, "Bearer token required") if token_string.nil?
 
         token = Doorkeeper::AccessToken.by_token(token_string)
-        return unauthorized("Invalid or expired token") if token.nil? || token.revoked? || token.expired?
+        if token.nil? || token.revoked? || token.expired?
+          return log_and_reject(request, :unauthorized, "Invalid or expired token")
+        end
 
         required = RailsMcp.configuration.scope
-        return insufficient_scope(required) if required && !required.empty? && !token.scopes.include?(required)
+        if required && !required.empty? && !token.scopes.include?(required)
+          return log_and_reject(request, :insufficient_scope, required)
+        end
 
         env["rails_mcp.access_token"] = token
         @app.call(env)
@@ -38,6 +42,12 @@ module RailsMcp
         auth.delete_prefix("Bearer ").strip
       end
 
+      def log_and_reject(request, type, detail)
+        Rails.logger.warn "[activerecord-mcp] Auth rejected #{request.request_method} #{request.path} " \
+                          "ip=#{request.ip} reason=#{type} detail=#{detail.inspect}"
+        type == :insufficient_scope ? insufficient_scope(detail) : unauthorized(detail)
+      end
+
       def unauthorized(message)
         body = { error: "invalid_token", error_description: message }.to_json
         [

data/lib/rails_mcp/database/model_resolver.rb

@@ -37,6 +37,10 @@ module RailsMcp
         raise AccessDenied, "Model #{klass.name} is not accessible" unless accessible?(klass)
       end
 
+      def self.accessible_model?(klass)
+        accessible?(klass)
+      end
+
       private_class_method def self.accessible?(klass)
         # Schema file takes precedence over allowed_models/denied_models
         schema = RailsMcp.schema_config

data/lib/rails_mcp/tools/describe_model.rb

@@ -29,15 +29,23 @@ module RailsMcp
       end
 
       def self.column_info(klass)
+        allowed = Database::ColumnPolicy.allowed_for(klass)
         klass.columns
-             .reject { |col| RailsMcp.configuration.column_denied?(col.name) }
+             .select { |col| allowed.include?(col.name) }
              .map { |col| { name: col.name, type: col.type.to_s, null: col.null, default: col.default } }
       end
 
       def self.association_info(klass)
-        klass.reflect_on_all_associations.map do |assoc|
-          { name: assoc.name.to_s, macro: assoc.macro.to_s, class_name: assoc.class_name }
-        end
+        klass.reflect_on_all_associations
+             .reject { |assoc| denied_association?(assoc) }
+             .map { |assoc| { name: assoc.name.to_s, macro: assoc.macro.to_s, class_name: assoc.class_name } }
+      end
+
+      def self.denied_association?(assoc)
+        klass = assoc.class_name.safe_constantize
+        return false unless klass && klass < ActiveRecord::Base
+
+        !Database::ModelResolver.accessible_model?(klass)
       end
 
       private_class_method :column_info, :association_info

data/lib/rails_mcp/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module RailsMcp
-  VERSION = "0.1.0"
+  VERSION = "0.1.1"
 end

data/rails-mcp.gemspec

@@ -12,7 +12,7 @@ Gem::Specification.new do |spec|
   spec.description = "A Rails Engine that implements a Model Context Protocol (MCP) server using " \
                      "HTTP-only Streamable HTTP transport. Provides built-in ActiveRecord query tools " \
                      "with configurable database roles, field filtering, and OAuth 2.1 + PKCE auth via Doorkeeper."
-  spec.homepage = "https://github.com/pauloancheta/rails-mcp"
+  spec.homepage = "https://github.com/pauloancheta/activerecord-mcp"
   spec.license = "MIT"
   spec.required_ruby_version = ">= 3.1.0"
 

data/test/tmp/generator_output/config/initializers/rails_mcp.rb

@@ -1,69 +1 @@
-# frozen_string_literal: true
-
-RailsMcp.configure do |config|
-  # The database role used for every query.
-  # Queries run via ActiveRecord's connected_to(role:), so this maps directly
-  # to a role defined in your database.yml. The default :reading role works
-  # out of the box with Rails' standard replica setup. Set to :writing if
-  # your app uses a single database with no named roles.
-  #
-  # config.database_role = :reading
-
-  # Columns returned when no fields are specified in a tool call.
-  # These are also automatically included when a schema_file is configured,
-  # even if the file omits them.
-  #
-  # config.default_fields = [:id, :created_at, :updated_at]
-
-  # Allowlist of model names the MCP can access.
-  # When non-empty, any model not in this list returns an error.
-  # Ignored when schema_file is set — the file's model list takes precedence.
-  #
-  # config.allowed_models = %w[User Post Order]
-
-  # Denylist of model names that are never accessible, regardless of allowed_models.
-  # Ignored when schema_file is set.
-  #
-  # config.denied_models = %w[AdminUser AuditLog]
-
-  # Columns that are completely invisible across all models and all tools.
-  # Accepts exact strings and/or regexes. Matching columns cannot be returned,
-  # used in conditions, or used in order — even if they appear in schema_file.
-  # Applied as the final layer, so it always wins over every other config.
-  #
-  # config.denied_columns = [
-  #   "password_digest",
-  #   "encrypted_password",
-  #   /token/i,
-  #   /secret/i,
-  #   /api_key/i,
-  # ]
-
-  # Maximum number of records a single query_records call can return.
-  # Client-supplied limit values are silently capped to this. Nil or zero
-  # limits also resolve to this value.
-  #
-  # config.max_limit = 100
-
-  # Maximum offset value accepted by query_records.
-  # Unlike max_limit, exceeding this raises an error rather than silently
-  # clamping — a clamped offset would return the wrong page without any
-  # indication to the caller.
-  #
-  # config.max_offset = 10_000
-
-  # Path to a YAML file that defines exactly which models and columns are
-  # accessible. When set, allowed_models and denied_models are ignored —
-  # the file's model list is the authoritative allowlist. id, created_at,
-  # and updated_at are still auto-included from default_fields even if
-  # omitted from the file. denied_columns still applies on top.
-  #
-  # config.schema_file = Rails.root.join("config/rails_mcp.yml")
-
-  # OAuth scope that every Bearer token must include. Tokens that are
-  # otherwise valid (not expired, not revoked) but lack this scope are
-  # rejected with 403 insufficient_scope. Set to nil to disable the check.
-  # Your Doorkeeper config must declare the same scope via optional_scopes.
-  #
-  # config.scope = "mcp"
-end
+# existing content

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: activerecord-mcp
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.1
 platform: ruby
 authors:
 - Paulo Ancheta
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-05-23 00:00:00.000000000 Z
+date: 2026-05-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: doorkeeper
@@ -63,6 +63,7 @@ extensions: []
 extra_rdoc_files: []
 files:
 - ".rubocop.yml"
+- ".ruby-version"
 - CHANGELOG.md
 - LICENSE
 - README.md
@@ -115,13 +116,13 @@ files:
 - test/unit/tools/find_record_test.rb
 - test/unit/tools/list_models_test.rb
 - test/unit/tools/query_records_test.rb
-homepage: https://github.com/pauloancheta/rails-mcp
+homepage: https://github.com/pauloancheta/activerecord-mcp
 licenses:
 - MIT
 metadata:
-  homepage_uri: https://github.com/pauloancheta/rails-mcp
-  source_code_uri: https://github.com/pauloancheta/rails-mcp
-  changelog_uri: https://github.com/pauloancheta/rails-mcp/blob/main/CHANGELOG.md
+  homepage_uri: https://github.com/pauloancheta/activerecord-mcp
+  source_code_uri: https://github.com/pauloancheta/activerecord-mcp
+  changelog_uri: https://github.com/pauloancheta/activerecord-mcp/blob/main/CHANGELOG.md
   rubygems_mfa_required: 'true'
 post_install_message:
 rdoc_options: []
@@ -138,7 +139,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.20
+rubygems_version: 3.5.11
 signing_key:
 specification_version: 4
 summary: MCP server for Rails apps — safe, role-aware database query tools over Streamable