Evidence · DiggingBeagle record
Instatic advisory: unauthorized private draft access through MCP content tools
First-party reproducer comparing HTTP and MCP content authorization.
- Published
- Nov 9, 2026
- Source role
- primary disclosure
Evidence record
First-party reproducer comparing HTTP and MCP content authorization.
Claim-level citations (2)
- supportsInstatic MCP content tools bypassed private-draft authorization: The advisory reports that AI/MCP content_get_document could return a private draft that the same principal could not fetch through normal HTTP.
Advisory Summary and Proof of Concept
- supportsInstatic MCP content tools bypassed private-draft authorization: The authorized scope also includes list and search paths that could enumerate another author’s content.
Advisory Details and other endpoints