Native /mcp user management with OAuth and TUI wizard #310
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "feat/native-mcp-user-management"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Implement the requested USER-facing MCP management, not model shell instructions. /mcp opens the native TUI server/action picker and HTTP/stdio add wizard; Matrix/WebUI expose the same host commands. Add/edit/remove, connect/reconnect/disconnect, enable/disable, tool listing/exposure, OAuth login/logout/cancel and remote browser callback. Reuse pinned PI OAuth/PKCE/issuer/state/token-refresh implementation and private auth store through one isolated compatibility adapter; no CLI subprocess or LLM turn. Login results return to the original authenticated operator/conversation only. Persistent runtime enablement is user-writable through the existing host setting service; existing sessions reload at their next prompt boundary without restart/history loss. Existing remote administrator identities and explicit tool allowlists remain intact. Typecheck/build and complete local suite: 1660 passed, 1 optional skip, 0 failed. Real HTTP OAuth tests prove direct and pasted browser callbacks, PKCE token exchange, foreign-actor denial, cancel, auth-store persistence/restart/logout. Real stdio/TUI wizard tests and actual dashboard-api HTTP-to-Core command acceptance also passed. Production OAuth provider-specific acceptance is not claimed; no test needs production secrets.