Ragnor Comerford 6cad21cb6a Default mcp.expose to true (the manifest entry is the opt-in) ... expose controls MCP-catalog membership only — it is not an authorization gate (invocation is gated by invoke_query regardless). So requiring a per-query mcp.expose: true was friction with no safety benefit: a non-exposed query is still HTTP-invocable by name. Flip the default so declaring a query in the manifest exposes it to the agent tool catalog by default; expose: false is the escape hatch for service-only queries. Both the absent-mcp path (Default impl) and the present-but-no-expose path (serde default fn) now yield true. Doc comments + cli-reference updated; the config round-trip test asserts the new default.		2026-05-31 12:59:30 +02:00
..
examples	feat: inline query strings in CLI and HTTP server (#110)	2026-05-29 13:41:54 +02:00
src	Default mcp.expose to true (the manifest entry is the opt-in)	2026-05-31 12:59:30 +02:00
tests	Scope the stored-query 404-hiding claim to non-invoke_query callers	2026-05-30 23:33:27 +02:00
Cargo.toml	(feat): multi-graph server mode (#119)	2026-05-28 16:19:31 +02:00