✅ Snyk checks have passed. No issues have been found so far.

Status	Scanner	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Greptile Summary

This PR adds gateway support for MCP (Model Context Protocol) servers, enabling connections to MCP servers on private networks through Infisical's gateway infrastructure.

Key Changes:

• Added gatewayId column to ai_mcp_servers table with foreign key to gateway_v2
• Implemented gateway-aware HTTP request wrappers for OAuth discovery and token exchange
• Created long-lived gateway proxies for MCP session connections with proper cleanup handlers
• Added UI controls to select gateways with permission checks (OrgPermissionGatewayActions.AttachGateways)
• Blocked OAuth authentication when using gateways (only Bearer/Basic auth supported)
• Updated documentation with gateway usage guide and limitations

Security Issues Found:

• The createMcpServer function does not validate the URL hostname before storing it in the database, creating a potential SSRF vulnerability when used with gateways
• User-controlled URLs determine the targetHost for gateway proxy connections, which could redirect to unintended internal services

Non-Breaking: All changes are additive - the gatewayId field is optional and nullable.

Confidence Score: 3/5

• This PR has security vulnerabilities that should be addressed before merging
• The implementation is well-structured with proper permission checks and clean separation of concerns. However, there are critical security issues: (1) Missing URL validation in createMcpServer allows storing potentially malicious URLs that could redirect gateway connections to internal services (SSRF), and (2) URL construction in gateway proxy helpers uses user-controlled input to determine target hosts without re-validation. The migration is idempotent and the frontend properly blocks OAuth when gateways are selected. These security issues need to be fixed before merging.
• Pay close attention to backend/src/ee/services/ai-mcp-server/ai-mcp-server-service.ts - add URL validation in createMcpServer function

Important Files Changed