feat: requires OAuth-only auth mode for MCP agents #12

Merged
admin merged 1 commits from feature/mcp-oauth-oidc into main 2026-04-29 12:22:25 +00:00
Owner

Remove the oauth_or_token fallback mode from MCP authentication.

MCP now supports only oauth for production agent connections and token for legacy/local static-token access. In oauth mode, MCP_TOKEN is no longer accepted, so external agents must use a valid OAuth/OIDC JWT access token with the required scope.

Update env examples and documentation to recommend MCP_AUTH_MODE=oauth, add a dedicated MCP OAuth README, and cover the new behavior with tests.

Remove the oauth_or_token fallback mode from MCP authentication. MCP now supports only oauth for production agent connections and token for legacy/local static-token access. In oauth mode, MCP_TOKEN is no longer accepted, so external agents must use a valid OAuth/OIDC JWT access token with the required scope. Update env examples and documentation to recommend MCP_AUTH_MODE=oauth, add a dedicated MCP OAuth README, and cover the new behavior with tests.
admin added 1 commit 2026-04-29 12:22:19 +00:00
admin merged commit a6f2883091 into main 2026-04-29 12:22:25 +00:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: admin/miem_workers#12