hitch-rails 0.2.0

metadata

@@ -0,0 +1,230 @@
+--- !ruby/object:Gem::Specification
+name: hitch-rails
+version: !ruby/object:Gem::Version
+  version: 0.2.0
+platform: ruby
+authors:
+- Tyler Klose
+bindir: bin
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: json
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '2.13'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '3'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '2.13'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '3'
+- !ruby/object:Gem::Dependency
+  name: json_schemer
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '2.4'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '3'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '2.4'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '3'
+- !ruby/object:Gem::Dependency
+  name: mcp
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.2'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.2'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '2'
+- !ruby/object:Gem::Dependency
+  name: rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '8.0'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '9'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '8.0'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '9'
+description: |
+  Hitch lets MCP clients -- Claude, ChatGPT, Cursor -- call your Rails
+  app's tools as a specific signed-in user, with access you can revoke.
+
+  You do not stand up a separate auth server, add Redis, or adopt a new
+  sign-in system. Hitch uses the authentication your app already has
+  (current_user or Current.user) and your configured cache store.
+
+  Underneath it is a full OAuth 2.1 authorization server implementing the
+  MCP 2026-07-28 authorization profile: PKCE (S256), audience-bound tokens
+  (RFC 8707), discovery metadata (RFC 8414 + RFC 9728), revocation
+  (RFC 7009), Client ID Metadata Documents, and optional Dynamic Client
+  Registration (RFC 7591). It adds an authenticated /mcp endpoint backed by
+  the official Ruby MCP SDK and a deny-default tool registry with schema
+  validation and size caps. SQLite and PostgreSQL supported.
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- CHANGELOG.md
+- MIT-LICENSE
+- README.md
+- SECURITY.md
+- app/controllers/concerns/hitch/cors_support.rb
+- app/controllers/concerns/hitch/host_validation.rb
+- app/controllers/concerns/hitch/issuer_url.rb
+- app/controllers/concerns/hitch/mcp/endpoint.rb
+- app/controllers/concerns/hitch/oauth_form_admission.rb
+- app/controllers/concerns/hitch/oauth_parameter_validation.rb
+- app/controllers/concerns/hitch/registration_admission.rb
+- app/controllers/concerns/hitch/request_admission.rb
+- app/controllers/concerns/hitch/uri_validation.rb
+- app/controllers/hitch/application_controller.rb
+- app/controllers/hitch/authorizations_controller.rb
+- app/controllers/hitch/metadata_controller.rb
+- app/controllers/hitch/preflights_controller.rb
+- app/controllers/hitch/public_endpoint_controller.rb
+- app/controllers/hitch/registrations_controller.rb
+- app/controllers/hitch/revocations_controller.rb
+- app/controllers/hitch/tokens_controller.rb
+- app/models/hitch/access_token.rb
+- app/models/hitch/application_record.rb
+- app/models/hitch/authorization_request.rb
+- app/models/hitch/client.rb
+- app/models/hitch/client/credentials.rb
+- app/models/hitch/client_authentication.rb
+- app/models/hitch/client_id_metadata.rb
+- app/models/hitch/client_id_metadata/cache.rb
+- app/models/hitch/client_id_metadata/fetcher.rb
+- app/models/hitch/client_id_metadata/throttle.rb
+- app/models/hitch/client_redirect_uri.rb
+- app/models/hitch/mcp/context.rb
+- app/models/hitch/mcp/forbidden.rb
+- app/models/hitch/mcp/internal.rb
+- app/models/hitch/mcp/internal/bearer_challenge.rb
+- app/models/hitch/mcp/internal/cors_policy.rb
+- app/models/hitch/mcp/internal/endpoint_error_reporter.rb
+- app/models/hitch/mcp/internal/error_normalizer.rb
+- app/models/hitch/mcp/internal/header_field.rb
+- app/models/hitch/mcp/internal/hmac_identity.rb
+- app/models/hitch/mcp/internal/host_authority.rb
+- app/models/hitch/mcp/internal/json_values.rb
+- app/models/hitch/mcp/internal/local_diagnosis.rb
+- app/models/hitch/mcp/internal/media_type.rb
+- app/models/hitch/mcp/internal/observation.rb
+- app/models/hitch/mcp/internal/registry_runtime.rb
+- app/models/hitch/mcp/internal/result_normalizer.rb
+- app/models/hitch/mcp/internal/sanitized_report.rb
+- app/models/hitch/mcp/internal/schema_contract.rb
+- app/models/hitch/mcp/internal/sdk_adapter.rb
+- app/models/hitch/mcp/internal/sdk_adapter/response_normalizer.rb
+- app/models/hitch/mcp/internal/server_info.rb
+- app/models/hitch/mcp/internal/verified_request.rb
+- app/models/hitch/mcp/rate_limit_key.rb
+- app/models/hitch/mcp/registry.rb
+- app/models/hitch/mcp/result.rb
+- app/models/hitch/mcp/tool.rb
+- app/models/hitch/oauth_request_parameters.rb
+- app/views/hitch/authorizations/new.html.erb
+- config/routes.rb
+- db/migrate/20260817000000_create_hitch_tables.rb
+- docs/operator/doctor.md
+- docs/operator/rate_limiting.md
+- docs/public_api/0.2.0.md
+- docs/removing.md
+- lib/generators/hitch/generator_guards.rb
+- lib/generators/hitch/install/install_generator.rb
+- lib/generators/hitch/install/templates/controller.rb.tt
+- lib/generators/hitch/install/templates/initializer.rb
+- lib/generators/hitch/install/templates/registry.rb
+- lib/generators/hitch/tool/templates/tool.rb.tt
+- lib/generators/hitch/tool/templates/tool_test.rb.tt
+- lib/generators/hitch/tool_generator.rb
+- lib/hitch-rails.rb
+- lib/hitch.rb
+- lib/hitch/configuration.rb
+- lib/hitch/doctor.rb
+- lib/hitch/dynamic_registration_rate_limit.rb
+- lib/hitch/engine.rb
+- lib/hitch/mcp/configuration.rb
+- lib/hitch/mcp/protocol.rb
+- lib/hitch/mcp/test_helper.rb
+- lib/hitch/pkce.rb
+- lib/hitch/rack_form_guard.rb
+- lib/hitch/rate_limit_store.rb
+- lib/hitch/resource_uri.rb
+- lib/hitch/version.rb
+- lib/tasks/hitch.rake
+homepage: https://github.com/tylerklose/hitch-rails
+licenses:
+- MIT
+metadata:
+  changelog_uri: https://github.com/tylerklose/hitch-rails/blob/main/CHANGELOG.md
+  bug_tracker_uri: https://github.com/tylerklose/hitch-rails/issues
+  allowed_push_host: https://rubygems.org
+  documentation_uri: https://github.com/tylerklose/hitch-rails/blob/v0.2.0/docs/public_api/0.2.0.md
+  rubygems_mfa_required: 'true'
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '3.3'
+  - - "<"
+    - !ruby/object:Gem::Version
+      version: '4.1'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.6.9
+specification_version: 4
+summary: 'Let AI agents call your Rails app''s tools: an OAuth 2.1 authorization server
+  plus an authenticated MCP endpoint, built on the sign-in you already have'
+test_files: []