The MCP server cannot serve security-restricted bugs to users who already have access to them
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 35/100
- Issue type
- Feature
- Clarity
- Mostly clear
- Activity status
- Quiet
- Tech stack
- python
- Domain
- authentication, security
Research direction
Start by locating the MCP server's path for requesting Bugzilla bug details and review how credentials are currently handled. Compare API-key and OAuth approaches for acting as the requesting user, including access to security-restricted bugs. Done means an authorized user can retrieve bugs they can already access through the MCP without unsafe credential workarounds.
Written by the indexing model from the issue text.
Description
Context: I asked Claude to get me the details of a security bug. It proposed some bad-for-us suggestions without any good ones. I have access to some security bugs, so I think I should be able to do this in an official way rather than be steered to a hacky and dangerous way.
(Aside: It discovered that it could actually find out a lot about a security bug using moz-phab. It also suggested I install https://github.com/python-bugzilla/python-bugzilla or putting an API key in ~/.config/bugzilla/curlrc)
It seems to me that the best option would be to allow the user to configure an API key or use OAuth or similar to allow the MCP to act as me.
- Dominant language
- Python
- Stars
- 570
- Forks
- 351
- Avg merge
- 1d 19h
- Merged PRs (30d)
- 66
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from mozilla/bugbug
-
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
-
good-first-bug hackbot
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
-
good-first-bug hackbot
Difficulty 1/5 1-3 hours Newbie friendliness 88/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
-
hackbot
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
Similar issues
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
stephrobert/dsoxlab#238 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
sublimehq/package_control#1780 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
nwg-piotr/nwg-displays#145 ·