Tools: restrict app_api and serve_preset to admins

Co-authored-by: RefuseOdd <refuseodd@users.noreply.github.com>
2026-06-02 23:29:47 +12:00
parent 12ba535c7d
commit 4218bfe71e
3 changed files with 13 additions and 8 deletions
--- a/src/tool_security.py
+++ b/src/tool_security.py
@@ -40,6 +40,7 @@ NON_ADMIN_BLOCKED_TOOLS = {
    "vault_unlock",
    "download_model",
    "serve_model",
+    "serve_preset",
    "stop_served_model",
    "cancel_download",
    "adopt_served_model",