Package com.ssgllc.fish.config.mcp

Class McpSecurityConfig

java.lang.Object

com.ssgllc.fish.config.mcp.McpSecurityConfig

@Configuration
public class McpSecurityConfig
extends Object

MCP tool configuration for security inspection.

Provides five tools for understanding role-based and attribute-level security as it is currently loaded in the permission cache:

• get-entity-security — entity-level permission bounds and attribute expressions
• get-field-security-for-entity — field-level permission bounds and attribute expressions
• get-role-security — effective entity permissions for a role across its full hierarchy
• list-roles — all roles with name, displayName, description, and direct parents
• get-user-details — user properties, effective roles, and userTokenFields attributes

All results reflect the live in-memory permission cache; stale data may appear if the cache has not been refreshed after a configuration change. Use refresh-caches (from McpConfigurationConfig) to force a reload.

Active only when spring.ai.mcp.server.enabled=true.

See Also:

• SecurityQueryService
• McpConfigurationConfig

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	McpSecurityConfig.SecurityTools	Tool implementations for security inspection.

Constructor Summary

Constructors

Constructor	Description
McpSecurityConfig()

Method Summary

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

McpSecurityConfig

public McpSecurityConfig()