Tools: restrict app_api and serve_preset to admins

Co-authored-by: RefuseOdd <refuseodd@users.noreply.github.com>
2026-06-02 23:29:47 +12:00
parent 12ba535c7d
commit 4218bfe71e
3 changed files with 13 additions and 8 deletions
--- a/src/tool_execution.py
+++ b/src/tool_execution.py
@@ -168,6 +168,7 @@ async def _run_subprocess_streaming(
    )

 _ADMIN_TOOLS = {
+    "app_api",
    "manage_endpoints",
    "manage_mcp",
    "manage_webhooks",
@@ -175,6 +176,7 @@ _ADMIN_TOOLS = {
    "manage_settings",
    "download_model",
    "serve_model",
+    "serve_preset",
    "stop_served_model",
    "cancel_download",
 }
--- a/src/tool_security.py
+++ b/src/tool_security.py
@@ -40,6 +40,7 @@ NON_ADMIN_BLOCKED_TOOLS = {
    "vault_unlock",
    "download_model",
    "serve_model",
+    "serve_preset",
    "stop_served_model",
    "cancel_download",
    "adopt_served_model",