From bfdc9734f5086ba8f1a50fd9e4bbcedbf79cf7bc Mon Sep 17 00:00:00 2001
From: stevef <stevef@omen.home>
Date: Tue, 14 Apr 2026 10:16:14 +0200
Subject: [PATCH] Remove all MCP server configurations and update whitelists
 for security hardening

---
 config/config.example.json | 50 +-------------------------------------
 config/config.json.azure   | 13 ++--------
 k3s/configmap.yaml         | 24 +++---------------
 3 files changed, 7 insertions(+), 80 deletions(-)

diff --git a/config/config.example.json b/config/config.example.json
index 933cd58b6..804811ed8 100644
--- a/config/config.example.json
+++ b/config/config.example.json
@@ -314,55 +314,7 @@
         "use_bm25": true,
         "use_regex": false
       },
-      "servers": {
-        "context7": {
-          "enabled": false,
-          "type": "http",
-          "url": "https://mcp.context7.com/mcp",
-          "headers": {
-            "CONTEXT7_API_KEY": "ctx7sk-xx"
-          }
-        },
-        "filesystem": {
-          "enabled": false,
-          "command": "npx",
-          "args": ["-y", "@modelcontextprotocol/server-filesystem", "/tmp"]
-        },
-        "github": {
-          "enabled": false,
-          "command": "npx",
-          "args": ["-y", "@modelcontextprotocol/server-github"],
-          "env": {
-            "GITHUB_PERSONAL_ACCESS_TOKEN": "YOUR_GITHUB_TOKEN"
-          }
-        },
-        "brave-search": {
-          "enabled": false,
-          "command": "npx",
-          "args": ["-y", "@modelcontextprotocol/server-brave-search"],
-          "env": {
-            "BRAVE_API_KEY": "YOUR_BRAVE_API_KEY"
-          }
-        },
-        "postgres": {
-          "enabled": false,
-          "command": "npx",
-          "args": [
-            "-y",
-            "@modelcontextprotocol/server-postgres",
-            "postgresql://user:password@localhost/dbname"
-          ]
-        },
-        "slack": {
-          "enabled": false,
-          "command": "npx",
-          "args": ["-y", "@modelcontextprotocol/server-slack"],
-          "env": {
-            "SLACK_BOT_TOKEN": "YOUR_SLACK_BOT_TOKEN",
-            "SLACK_TEAM_ID": "YOUR_SLACK_TEAM_ID"
-          }
-        }
-      }
+      "servers": {}
     },
     "exec": {
       "enabled": true,
diff --git a/config/config.json.azure b/config/config.json.azure
index 9a7ff3397..747991a3d 100644
--- a/config/config.json.azure
+++ b/config/config.json.azure
@@ -476,14 +476,7 @@
       "interval_minutes": 5
     },
     "mcp": {
-      "enabled": true,
-      "discovery": {
-        "enabled": false,
-        "ttl": 5,
-        "max_search_results": 5,
-        "use_bm25": true,
-        "use_regex": false
-      },
+      "enabled": false,
       "servers": {}
     },
     "whitelist": [
@@ -496,9 +489,7 @@
       "append_file",
       "message",
       "weather",
-      "summarize",
-      "github",
-      "search_tool"
+      "summarize"
     ],
     "whitelist_enabled": true,
     "append_file": {
diff --git a/k3s/configmap.yaml b/k3s/configmap.yaml
index e0145c2d1..c26cf512f 100644
--- a/k3s/configmap.yaml
+++ b/k3s/configmap.yaml
@@ -497,28 +497,14 @@ data:
             "ttl_seconds": 300
           }
         },
-        "media_cleanup": {
+"media_cleanup": {
           "enabled": true,
           "max_age_minutes": 30,
           "interval_minutes": 5
         },
         "mcp": {
-          "enabled": true,
-          "discovery": {
-            "enabled": false,
-            "ttl": 5,
-            "max_search_results": 5,
-            "use_bm25": true,
-            "use_regex": false
-          },
-          "servers": {
-            "hdn-server": {
-              "enabled": true,
-              "command": "",
-              "type": "sse",
-              "url": "http://hdn-server:8080/mcp"
-            }
-          }
+          "enabled": false,
+          "servers": {}
         },
         "whitelist": [
           "spawn",
@@ -531,9 +517,7 @@ data:
           "exec",
           "message",
           "weather",
-          "summarize",
-          "github",
-          "hdn-server"
+          "summarize"
         ],
         "whitelist_enabled": true,
         "append_file": {