sean/binjovi
Watch
1
0
Fork
You've already forked binjovi
 0
Code Issues Pull requests 1 Projects Releases 745 Packages Wiki Activity

Add disabled MCP read endpoint and PostgreSQL sessions #1600

Merged
binjovi-bot merged 4 commits from feat/mcp-server into trunk 2026-09-11 18:45:36 +00:00
Conversation 0 Commits 4 Files changed 31 +1271 -151
sean commented 2026-09-11 18:41:19 +00:00
Owner
Copy link

Partial implementation of the MCP plan. Includes the timeout assessment and pinned Bandit-compatible ExMCP foundations from #1598 and #1599. Adds RS256 Hydra token validation, PostgreSQL session ownership and atomic claims, protected resource metadata, and four bounded read tools. Disabled by default; no cluster changes.

Verification: 316 API tests passed, 230 PostgreSQL tests passed, and new Bash/jq token, tool, HTTP boundary, and session/protocol checks passed. Both protocol paths use the real HTTP plug; real-client sign-in is not yet tested.

Remaining: telemetry, logs, services, waits, commands/receipts, OAuth compatibility service and deployment. Shared OAuth discovery is owned by Flux ory-portal-bridge and advertises Pipelines registration. A compatibility decision is needed before replacing shared discovery with a Binjovi-specific endpoint. See docs/mcp-server.md. Recurring fork checks remain deferred.

Partial implementation of the MCP plan. Includes the timeout assessment and pinned Bandit-compatible ExMCP foundations from #1598 and #1599. Adds RS256 Hydra token validation, PostgreSQL session ownership and atomic claims, protected resource metadata, and four bounded read tools. Disabled by default; no cluster changes. Verification: 316 API tests passed, 230 PostgreSQL tests passed, and new Bash/jq token, tool, HTTP boundary, and session/protocol checks passed. Both protocol paths use the real HTTP plug; real-client sign-in is not yet tested. Remaining: telemetry, logs, services, waits, commands/receipts, OAuth compatibility service and deployment. Shared OAuth discovery is owned by Flux ory-portal-bridge and advertises Pipelines registration. A compatibility decision is needed before replacing shared discovery with a Binjovi-specific endpoint. See docs/mcp-server.md. Recurring fork checks remain deferred.
Add disabled MCP read endpoint with PostgreSQL sessions
Some checks failed
binjovi/ci Binjovi failed the frozen plan
Details
790caaaa58
Include MCP checks in their container test stages
All checks were successful
binjovi/ci Binjovi completed the frozen plan
Details
7eb1258a15
sean changed title from WIP: Add disabled MCP read endpoint and PostgreSQL sessions to Add disabled MCP read endpoint and PostgreSQL sessions 2026-09-11 18:45:04 +00:00
binjovi-bot deleted branch feat/mcp-server 2026-09-11 18:45:36 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
sean/binjovi!1600
No description provided.