Skip to content

feat: add MCP_ENABLED for the remote MCP surface #5

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
lakhansamani merged 1 commit into from
Aug 11, 2026
Merged

feat: add MCP_ENABLED for the remote MCP surface #5

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# Base runs as USER authorizer (uid 1000). For SQLite, ensure mounted /data is writable by that user.
# Pinned to the 2.4.0 release candidate because it is the first published
# image with the current CLI flag surface (--url, --oauth2-1-strict,
# image with the current CLI flag surface (--url, --mcp-enabled, --oauth2-1-strict,
# --enable-org-discovery, --disable-totp-login/-webauthn-mfa/-email-otp/
# -sms-otp/-mfa). Re-pin to the stable 2.4.0 tag once it ships.
FROM quay.io/authorizer/authorizer:2.4.0-rc.18
Expand Down Expand Up @@ -54,6 +54,7 @@ CMD ["exec ./authorizer \\\n\
--grpc-insecure=\"${GRPC_INSECURE:-true}\" \\\n\
--grpc-tls-cert=\"${GRPC_TLS_CERT}\" \\\n\
--grpc-tls-key=\"${GRPC_TLS_KEY}\" \\\n\
--mcp-enabled=\"${MCP_ENABLED:-false}\" \\\n\
--rate-limit-rps=\"${RATE_LIMIT_RPS:-30}\" \\\n\
--rate-limit-burst=\"${RATE_LIMIT_BURST:-20}\" \\\n\
--rate-limit-fail-closed=\"${RATE_LIMIT_FAIL_CLOSED:-false}\" \\\n\
Expand Down
7 changes: 7 additions & 0 deletions render.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,6 +31,13 @@ services:
generateValue: true
- key: JWT_TYPE
value: HS256
- key: MCP_ENABLED
# Serve the MCP tool surface over HTTP at POST <AUTHORIZER_URL>/mcp as
# an OAuth 2.1 resource server for AI agents. REQUIRES AUTHORIZER_URL:
# the audience every MCP token is checked against is derived from it, so
# the server exits at boot if this is true without one. Off by default —
# it is a new internet-facing authenticated surface.
value: "false"
- key: AUTHORIZER_URL
# Canonical/trusted base URL of this deployment (e.g. your Render
# service URL). When set, it is the only source used to build
Expand Down