From 502d3619e3f2b9627cef17d7822254f9ebd6dd37 Mon Sep 17 00:00:00 2001 From: Matthew Podwysocki Date: Mon, 13 Jul 2026 16:44:02 -0400 Subject: [PATCH] docs: note that unsolicited directory/discovery listing PRs are out of scope Mirrors the same addition in mapbox/mcp-server, prompted by spam PRs adding third-party "agent discovery" manifests/badges with no functional value. --- CHANGELOG.md | 2 ++ CONTRIBUTING.md | 4 ++++ 2 files changed, 6 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 5c88742..99d9396 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,7 @@ ## Unreleased +- docs: note in CONTRIBUTING.md that unsolicited third-party directory/discovery listing PRs are out of scope and will be closed without review + ## 0.3.1 - 2026-06-11 - security: restrict document tool URL allowlist to documentation hosts and block access_token params (#34) diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 5b75411..3bedaa9 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -18,6 +18,10 @@ npm test - All CI checks must pass before merging (lint, format, tests) - At least one maintainer approval is required +### Out of Scope + +We do not accept PRs that add listings, badges, or manifest files for third-party directories, registries, or "discovery" services (e.g. unsolicited `README.md` badges linking to an external site, or manifest files with no functional purpose in this project). These will be closed without review. + ## Code Standards ### TypeScript