Our MCP Client (IBM watsonx Orchestrate) has security features to prevent against injection attacks. This prevents use of three specific tools in the monday.com/mcp catalog.
mcp-gateway-1 | 2026-03-20T17:58:14 - mcpgateway.services.gateway_service - ERROR - Validation failed for tool 'get_updates': [{'type': 'value_error', 'loc': ('description',), 'msg': "Value error, Description contains unsafe characters: ';'", 'input': 'Get updates (comments/posts) from a monday.com item or board. Specify objectId and objectType (Item or Board) to retrieve updates. For Board queries, you can filter by date range using fromDate and toDate (both required together, ISO8601 format). By default, Board queries return only board discussion; set includeItemUpdates to true to also include updates on individual items. Returns update text, creator info, timestamps, and optionally replies and assets.', 'ctx': {'error': ValueError("Description contains unsafe characters: ';'")}, 'url': '[https://errors.pydantic.dev/2.12/v/value_error'}](https://errors.pydantic.dev/2.12/v/value_error'%7D)]
mcp-gateway-1 | 2026-03-20T17:58:14 - mcpgateway.services.gateway_service - ERROR - Validation failed for tool 'get_board_info': [{'type': 'value_error', 'loc': ('description',), 'msg': "Value error, Description contains unsafe characters: '`'", 'input': "Get comprehensive board information including metadata, structure, owners, and configuration. Also returns the board's views (e.g. table views, filter views) — each view includes its id, name, type, and a structured `filter` object. ", 'ctx': {'error': ValueError("Description contains unsafe characters: '`'")}, 'url': '[https://errors.pydantic.dev/2.12/v/value_error'}](https://errors.pydantic.dev/2.12/v/value_error'%7D)]
mcp-gateway-1 | 2026-03-20T17:58:14 - mcpgateway.services.gateway_service - ERROR - Validation failed for tool 'move_object': [{'type': 'value_error', 'loc': ('description',), 'msg': "Value error, Description contains unsafe characters: '`'", 'input': 'Move a folder, board, or overview in monday.com. Use `position` for relative placement based on another object, `parentFolderId` for folder changes, `workspaceId` for workspace moves, and `accountProductId` for account product changes.', 'ctx': {'error': ValueError("Description contains unsafe characters: '`'")}, 'url': '[https://errors.pydantic.dev/2.12/v/value_error'}](https://errors.pydantic.dev/2.12/v/value_error'%7D)]
mcp-gateway-1 | 2026-03-20T17:58:14 - mcpgateway.services.gateway_service - WARNING - Tool validation completed with 3 error(s). Successfully validated 37 tool(s).
mcp-gateway-1
The descriptions originate upstream but I feel the mcp server should defend against unsafe characters in the description and drop them or replace them with safe alternatives.
Our MCP Client (IBM watsonx Orchestrate) has security features to prevent against injection attacks. This prevents use of three specific tools in the monday.com/mcp catalog.
The descriptions originate upstream but I feel the mcp server should defend against unsafe characters in the description and drop them or replace them with safe alternatives.