GHSA-f9ff-5x35-7gfw: Grackle: Fail-open authorization in the MCP tool layer lets scoped agents perform cross-task and cross-session mutations (IDOR)

Grackle's MCP (Model Context Protocol) tool layer has inconsistent authorization checks that let scoped agents (restricted AI assistants) perform operations they shouldn't be allowed to, like deleting or modifying other agents' tasks or reading data across workspaces (an IDOR vulnerability, where attackers access resources by guessing IDs). The root cause is that the server uses its full API key for all backend requests without passing caller information, making the MCP tool layer the only place where permissions are checked, and some tools skip these checks entirely.