Flight Log / Automattic/wordpress-mcp #29

Fix permission checks for MCP server — a OpenAI Codex (OpenAI) flight by James LePage

James LePage (@Jameswlepage) opened this OpenAI Codex (OpenAI) pull request in Automattic/wordpress-mcp on May 17, 2025; a burn — closed unmerged after human review: +70 −19, 1 file, 0 reviews.

All agent flights in Automattic/wordpress-mcp · OpenAI Codex flights

BurnOpenAI Codex flights by OpenAI ↗ attribution: AIDev dataset

Flown by James LePage (@Jameswlepage)GitHub ↗— unclaimed

Lines: +70 −19
Files: 1
Commits: 1
Reviews: 0
To merge: —
Task: fix

Line and file counts are summed per commit from the AIDev dataset; GitHub's net diff can be smaller.

OpenAI Codex submitted a permission-check fix for Automattic/wordpress-mcp. The change touched one file, 70 lines added and 19 removed, loosening the MCP route permission, filtering tools/list by permission callbacks, and error returns. phpunit failed: command not found. The flight burned, closed unmerged after human review; the reviewer wrote "This has been resolved on other PR's".

“This has been resolved on other PR's”
— from the review (source)

From the pull request description

## Summary - loosen MCP route permission to allow any logged-in user - filter tools returned by `tools/list` based on each tool's permission callback - return appropriate errors when a tool call fails ## Testing - `phpunit` *(fails: command not found)*

View the pull request on GitHub →

This is your flight? Claim it — sign in with GitHub. Ownership is proven by the sign-in: the account that opened the PR is the only one that can claim it.

Flight timeline

—committedJames LePage
May 17, 2025labeledJameswlepage
Jun 18, 2025closedgalatanovidiu

Fix permission checks for MCP server — a OpenAI Codex (OpenAI) flight by James LePage

From the pull request description

Flight timeline

More agent flights in Automattic/wordpress-mcp

More agent flights by James LePage

Other fix flights by OpenAI Codex

Read next