-
Notifications
You must be signed in to change notification settings - Fork 12
OpenJul 14, 2026
No due date
•Last updated Hosted MCP server, stage 1 of 5. HTTP transport, resource-server wiring, request-scoped identity, and the host allowlist behind a flag: the usable hosted foundation. Plus the early dependency verifications.
89% complete
List view
0 of 17 selected 0 issues of 17 selected
HTTP (Streamable) transport profile and combined --remote launch flag
enhancementNew capability or intentional behavior change (not a bugfix)New capability or intentional behavior change (not a bugfix)hosted-mcpHosted / remote MCP profile (multi-user, on-behalf-of, auth surface)Hosted / remote MCP profile (multi-user, on-behalf-of, auth surface)Status: Closed (completed).#300 In pipefy/ai-toolkit;OAuth resource-server role
enhancementNew capability or intentional behavior change (not a bugfix)New capability or intentional behavior change (not a bugfix)hosted-mcpHosted / remote MCP profile (multi-user, on-behalf-of, auth surface)Hosted / remote MCP profile (multi-user, on-behalf-of, auth surface)Status: Closed (completed).#301 In pipefy/ai-toolkit;Request-scoped identity
enhancementNew capability or intentional behavior change (not a bugfix)New capability or intentional behavior change (not a bugfix)hosted-mcpHosted / remote MCP profile (multi-user, on-behalf-of, auth surface)Hosted / remote MCP profile (multi-user, on-behalf-of, auth surface)Status: Closed (completed).#302 In pipefy/ai-toolkit;Configurable transport host allowlist
enhancementNew capability or intentional behavior change (not a bugfix)New capability or intentional behavior change (not a bugfix)hosted-mcpHosted / remote MCP profile (multi-user, on-behalf-of, auth surface)Hosted / remote MCP profile (multi-user, on-behalf-of, auth surface)Status: Closed (completed).#303 In pipefy/ai-toolkit;Verify the production API accepts the user-facing issuer
hosted-mcpHosted / remote MCP profile (multi-user, on-behalf-of, auth surface)Hosted / remote MCP profile (multi-user, on-behalf-of, auth surface)questionClarification needed; not yet a confirmed bug or featureClarification needed; not yet a confirmed bug or featureStatus: Closed (completed).#312 In pipefy/ai-toolkit;Authorization-server grant-support probe
hosted-mcpHosted / remote MCP profile (multi-user, on-behalf-of, auth surface)Hosted / remote MCP profile (multi-user, on-behalf-of, auth surface)questionClarification needed; not yet a confirmed bug or featureClarification needed; not yet a confirmed bug or featureStatus: Closed (completed).#314 In pipefy/ai-toolkit;refactor(mcp): register tools at construction, reserve lifespan for resources
refactorInternal restructure with no intended user-facing behavior changeInternal restructure with no intended user-facing behavior changeStatus: Merged (completed).refactor(mcp): inject per-request client via Context
refactorInternal restructure with no intended user-facing behavior changeInternal restructure with no intended user-facing behavior changeStatus: Merged (completed).feat(mcp): HTTP (streamable) transport profile and --remote flag
enhancementNew capability or intentional behavior change (not a bugfix)New capability or intentional behavior change (not a bugfix)Status: Merged (completed).refactor(sdk,mcp,cli): consolidate internal API client construction and ownership
refactorInternal restructure with no intended user-facing behavior changeInternal restructure with no intended user-facing behavior changeStatus: Merged (completed).refactor(sdk): constructor-level DI for services via an injected GraphQLExecutor
refactorInternal restructure with no intended user-facing behavior changeInternal restructure with no intended user-facing behavior changeStatus: Merged (completed).- Status: Merged (completed).
refactor(mcp): split --remote into --profile and --transport
refactorInternal restructure with no intended user-facing behavior changeInternal restructure with no intended user-facing behavior changeStatus: Merged (completed).feat(mcp): request-scoped identity via app-scoped runtime
enhancementNew capability or intentional behavior change (not a bugfix)New capability or intentional behavior change (not a bugfix)Status: Merged (completed).feat(mcp): add tool-call middleware seam
enhancementNew capability or intentional behavior change (not a bugfix)New capability or intentional behavior change (not a bugfix)Status: Merged (completed).feat(mcp): replace bind-host guard with auth-posture interlock
hosted-mcpHosted / remote MCP profile (multi-user, on-behalf-of, auth surface)Hosted / remote MCP profile (multi-user, on-behalf-of, auth surface)refactorInternal restructure with no intended user-facing behavior changeInternal restructure with no intended user-facing behavior changeStatus: Merged (completed).feat(mcp): configurable transport host/Origin allowlist
hosted-mcpHosted / remote MCP profile (multi-user, on-behalf-of, auth surface)Hosted / remote MCP profile (multi-user, on-behalf-of, auth surface)refactorInternal restructure with no intended user-facing behavior changeInternal restructure with no intended user-facing behavior changeStatus: Merged (completed).