Method process

api/mcp_server_scan.py:23–94

(self, input: dict[Any, Any], request: Request)

class McpServerScan(ApiHandler):
    async def process(self, input: dict[Any, Any], request: Request) -> dict[Any, Any] | Response:
        server = dict(input.get("server") or {})
        allow_local_execution = bool(input.get("allow_local_execution", False))
        allow_remote_network = bool(input.get("allow_remote_network", False))
        inspect_runtime = input.get("inspect_runtime", True) is not False

        server = self._normalize_server(server)
        warnings = self._static_warnings(server)
        is_local = not (server.get("url") or server.get("serverUrl"))
        has_static_errors = any(warning.get("level") == "error" for warning in warnings)

        runtime_status: list[dict[str, Any]] = []
        runtime_detail: dict[str, Any] = {}
        runtime_error = ""

        should_inspect_runtime = (
            inspect_runtime
            and not has_static_errors
            and ((is_local and allow_local_execution) or (not is_local and allow_remote_network))
        )

        if should_inspect_runtime:
            try:
                scan_config = await asyncio.to_thread(
                    lambda: MCPConfig(servers_list=[server], config_scope="scan")
                )
                runtime_status = scan_config.get_servers_status()
                runtime_detail = scan_config.get_server_detail(server.get("name", ""))
                warnings.extend(self._tool_warnings(runtime_detail.get("tools", [])))
            except Exception as exc:
                runtime_error = str(exc)
                warnings.append(
                    {
                        "level": "error",
                        "title": "Runtime inspection failed",
                        "message": runtime_error,
                    }
                )
        elif is_local and inspect_runtime:
            warnings.append(
                {
                    "level": "warning",
                    "title": "Local command not executed",
                    "message": "Local stdio MCP inspection requires explicit trust because it runs the configured command.",
                }
            )
        elif not is_local and inspect_runtime and has_static_errors:
            warnings.append(
                {
                    "level": "info",
                    "title": "Runtime inspection skipped",
                    "message": "Fix static scan errors before attempting runtime MCP inspection.",
                }
            )
        elif not is_local and inspect_runtime:
            warnings.append(
                {
                    "level": "info",