MCP origins allowlist needs tailnet FQDN configurable per-host #27
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally filed by @coilysiren on 2026-05-19T08:38:02Z - https://github.com/coilysiren/repo-recall/issues/202
When repo-recall serves over tailscale serve on kai-server, requests to /mcp come in with Host: kai-server.tail09a41b.ts.net, which the pmcp DNS-rebinding allowlist rejects with: Forbidden: Host header not in allowed origins. The router reads REPO_RECALL_MCP_ORIGINS as a comma-separated extras list, but the brew formula's service block does not set it, so a fresh brew services start on kai-server boots an MCP endpoint that cannot talk to its own tailnet host. Per AGENTS the tailnet FQDN is opaque and lives in SSM at /coilysiren/kai-server/tailnet-fqdn, so the formula cannot just hardcode it. Right shape is probably a systemd drop-in on kai-server that sets REPO_RECALL_MCP_ORIGINS from SSM before the brew-generated service starts. Workaround until a real fix: brew services edit repo-recall and add the env var by hand. Surfaced during the post-cleanup restoration of three-mode operation on 2026-05-19.