feat(mcp): serve MCP over HTTP as an OAuth 2.1 resource server - #757

Merged

lakhansamani merged 11 commits into

mainfrom

feat/mcp-http-transport

Aug 11, 2026

Commits on Aug 10, 2026

feat(mcp): add resource-server foundation for HTTP MCP
lakhansamani
committed
db0c0a6
security(token): deactivating a service account revokes its tokens
lakhansamani
committed
138f98c
security: make revocation survive a storage outage
lakhansamani
committed
969d412
security(oauth): keep the RFC 8707 resource across refresh
lakhansamani
committed
a986b81
feat(mcp): serve MCP over HTTP at POST /mcp
lakhansamani
committed
9eb334a
docs(mcp): document the remote transport, deprecate stdio
lakhansamani
committed
3843be9
fix(oauth): carry the RFC 8707 resource through the login redirect
lakhansamani
committed
fbea334
security: fix cross-backend liveness, loopback URI, admin bypass
lakhansamani
committed
cdc71b0
fix(storage): make not-found recognisable on dynamodb and couchbase
lakhansamani
committed
f0ba9a6
docs(mcp): correct the stdio subcommand's stale help text
lakhansamani
committed
dbc6563

Commits on Aug 11, 2026

docs(mcp): record why there is no dynamic client registration
lakhansamani
committed
c2411b7