@agentstep/agent-sdk 0.5.28 → 0.5.34

package/dist/auth/middleware.js

@@ -2,17 +2,17 @@ import {
   authenticate,
   authenticateAndIntercept,
   extractKey
-} from "../chunk-CVYNMYIE.js";
-import "../chunk-IDQKHWWN.js";
+} from "../chunk-CWB2DQN5.js";
+import "../chunk-JFHYXFAL.js";
 import "../chunk-W6WKXFHN.js";
-import "../chunk-LJNLU5PQ.js";
+import "../chunk-3NUTTKE5.js";
 import "../chunk-F4WUVOLE.js";
-import "../chunk-US26CY2Y.js";
+import "../chunk-6EIONZ7F.js";
 import "../chunk-HFDLUBWN.js";
-import "../chunk-7U62OZSD.js";
-import "../chunk-4ENK7S24.js";
-import "../chunk-Q62QJXGO.js";
-import "../chunk-HDLPEXWS.js";
+import "../chunk-ZDDMPGN4.js";
+import "../chunk-CXYMVLYK.js";
+import "../chunk-AGIXZFHQ.js";
+import "../chunk-S5CMAWEC.js";
 import "../chunk-EZYKRG4W.js";
 import "../chunk-2ESYSVXG.js";
 export {

package/dist/backends/claude/args.js

@@ -1,15 +1,15 @@
 import {
   buildClaudeArgs,
   buildClaudeAuthEnv
-} from "../../chunk-GSDVHR43.js";
+} from "../../chunk-YJCH35J4.js";
 import "../../chunk-YE2RMJY7.js";
 import "../../chunk-FX2AEKOV.js";
-import "../../chunk-US26CY2Y.js";
+import "../../chunk-6EIONZ7F.js";
 import "../../chunk-HFDLUBWN.js";
-import "../../chunk-7U62OZSD.js";
-import "../../chunk-4ENK7S24.js";
-import "../../chunk-Q62QJXGO.js";
-import "../../chunk-HDLPEXWS.js";
+import "../../chunk-ZDDMPGN4.js";
+import "../../chunk-CXYMVLYK.js";
+import "../../chunk-AGIXZFHQ.js";
+import "../../chunk-S5CMAWEC.js";
 import "../../chunk-7XQLG5P2.js";
 import "../../chunk-2ESYSVXG.js";
 export {

package/dist/backends/claude/index.js

@@ -2,29 +2,29 @@ import {
   claudeBackend,
   installPermissionHook,
   installToolBridge
-} from "../../chunk-WG3N6VUA.js";
+} from "../../chunk-JN3DHH7Z.js";
+import "../../chunk-VRRGSQI7.js";
+import {
+  createClaudeTranslator
+} from "../../chunk-D6RQPBRG.js";
 import {
   buildClaudeArgs,
   buildClaudeAuthEnv
-} from "../../chunk-GSDVHR43.js";
+} from "../../chunk-YJCH35J4.js";
 import "../../chunk-YE2RMJY7.js";
 import "../../chunk-CY6AWCC6.js";
-import "../../chunk-VRRGSQI7.js";
-import {
-  createClaudeTranslator
-} from "../../chunk-D6RQPBRG.js";
 import "../../chunk-FX2AEKOV.js";
 import {
   CLAUDE_WRAPPER_PATH,
   installClaudeWrapper
 } from "../../chunk-J6T3W6RY.js";
 import "../../chunk-F4WUVOLE.js";
-import "../../chunk-US26CY2Y.js";
+import "../../chunk-6EIONZ7F.js";
 import "../../chunk-HFDLUBWN.js";
-import "../../chunk-7U62OZSD.js";
-import "../../chunk-4ENK7S24.js";
-import "../../chunk-Q62QJXGO.js";
-import "../../chunk-HDLPEXWS.js";
+import "../../chunk-ZDDMPGN4.js";
+import "../../chunk-CXYMVLYK.js";
+import "../../chunk-AGIXZFHQ.js";
+import "../../chunk-S5CMAWEC.js";
 import {
   ApiError
 } from "../../chunk-EZYKRG4W.js";

package/dist/backends/codex/auth.js

@@ -1,13 +1,13 @@
 import {
   buildCodexAuthEnv,
   validateCodexRuntime
-} from "../../chunk-YMKQJY5F.js";
-import "../../chunk-US26CY2Y.js";
+} from "../../chunk-SIO4LO2M.js";
+import "../../chunk-6EIONZ7F.js";
 import "../../chunk-HFDLUBWN.js";
-import "../../chunk-7U62OZSD.js";
-import "../../chunk-4ENK7S24.js";
-import "../../chunk-Q62QJXGO.js";
-import "../../chunk-HDLPEXWS.js";
+import "../../chunk-ZDDMPGN4.js";
+import "../../chunk-CXYMVLYK.js";
+import "../../chunk-AGIXZFHQ.js";
+import "../../chunk-S5CMAWEC.js";
 import "../../chunk-2ESYSVXG.js";
 export {
   buildCodexAuthEnv,

package/dist/backends/codex/index.js

@@ -1,28 +1,28 @@
 import {
   codexBackend
-} from "../../chunk-VVCRJ46V.js";
+} from "../../chunk-WEUPM3IN.js";
 import {
   buildCodexArgs
 } from "../../chunk-PJYCPDV5.js";
 import {
   buildCodexAuthEnv
-} from "../../chunk-YMKQJY5F.js";
+} from "../../chunk-SIO4LO2M.js";
 import {
   prepareCodexOnSandbox
 } from "../../chunk-NMZMRH3E.js";
-import {
-  createCodexTranslator
-} from "../../chunk-CULYZ3VA.js";
 import {
   CODEX_WRAPPER_PATH
 } from "../../chunk-XJYR5HE3.js";
+import {
+  createCodexTranslator
+} from "../../chunk-CULYZ3VA.js";
 import "../../chunk-YE2RMJY7.js";
-import "../../chunk-US26CY2Y.js";
+import "../../chunk-6EIONZ7F.js";
 import "../../chunk-HFDLUBWN.js";
-import "../../chunk-7U62OZSD.js";
-import "../../chunk-4ENK7S24.js";
-import "../../chunk-Q62QJXGO.js";
-import "../../chunk-HDLPEXWS.js";
+import "../../chunk-ZDDMPGN4.js";
+import "../../chunk-CXYMVLYK.js";
+import "../../chunk-AGIXZFHQ.js";
+import "../../chunk-S5CMAWEC.js";
 import "../../chunk-EZYKRG4W.js";
 import "../../chunk-2ESYSVXG.js";
 export {

package/dist/backends/factory/auth.js

@@ -1,13 +1,13 @@
 import {
   buildFactoryAuthEnv,
   validateFactoryRuntime
-} from "../../chunk-MNW6D7T4.js";
-import "../../chunk-US26CY2Y.js";
+} from "../../chunk-M72ERPMT.js";
+import "../../chunk-6EIONZ7F.js";
 import "../../chunk-HFDLUBWN.js";
-import "../../chunk-7U62OZSD.js";
-import "../../chunk-4ENK7S24.js";
-import "../../chunk-Q62QJXGO.js";
-import "../../chunk-HDLPEXWS.js";
+import "../../chunk-ZDDMPGN4.js";
+import "../../chunk-CXYMVLYK.js";
+import "../../chunk-AGIXZFHQ.js";
+import "../../chunk-S5CMAWEC.js";
 import "../../chunk-2ESYSVXG.js";
 export {
   buildFactoryAuthEnv,

package/dist/backends/factory/index.js

@@ -1,6 +1,12 @@
 import {
   factoryBackend
-} from "../../chunk-MZ6HBYGV.js";
+} from "../../chunk-65XY7HRS.js";
+import {
+  buildFactoryArgs
+} from "../../chunk-TPMZO6S2.js";
+import {
+  buildFactoryAuthEnv
+} from "../../chunk-M72ERPMT.js";
 import {
   prepareFactoryOnSandbox
 } from "../../chunk-AQHYCRTO.js";
@@ -10,19 +16,13 @@ import {
 import {
   FACTORY_WRAPPER_PATH
 } from "../../chunk-KJ2GJLPQ.js";
-import {
-  buildFactoryArgs
-} from "../../chunk-TPMZO6S2.js";
-import {
-  buildFactoryAuthEnv
-} from "../../chunk-MNW6D7T4.js";
 import "../../chunk-YE2RMJY7.js";
-import "../../chunk-US26CY2Y.js";
+import "../../chunk-6EIONZ7F.js";
 import "../../chunk-HFDLUBWN.js";
-import "../../chunk-7U62OZSD.js";
-import "../../chunk-4ENK7S24.js";
-import "../../chunk-Q62QJXGO.js";
-import "../../chunk-HDLPEXWS.js";
+import "../../chunk-ZDDMPGN4.js";
+import "../../chunk-CXYMVLYK.js";
+import "../../chunk-AGIXZFHQ.js";
+import "../../chunk-S5CMAWEC.js";
 import "../../chunk-EZYKRG4W.js";
 import "../../chunk-2ESYSVXG.js";
 export {

package/dist/backends/gemini/auth.js

@@ -1,13 +1,13 @@
 import {
   buildGeminiAuthEnv,
   validateGeminiRuntime
-} from "../../chunk-TJORQTH6.js";
-import "../../chunk-US26CY2Y.js";
+} from "../../chunk-KGOOCFQY.js";
+import "../../chunk-6EIONZ7F.js";
 import "../../chunk-HFDLUBWN.js";
-import "../../chunk-7U62OZSD.js";
-import "../../chunk-4ENK7S24.js";
-import "../../chunk-Q62QJXGO.js";
-import "../../chunk-HDLPEXWS.js";
+import "../../chunk-ZDDMPGN4.js";
+import "../../chunk-CXYMVLYK.js";
+import "../../chunk-AGIXZFHQ.js";
+import "../../chunk-S5CMAWEC.js";
 import "../../chunk-2ESYSVXG.js";
 export {
   buildGeminiAuthEnv,

package/dist/backends/gemini/index.js

@@ -1,28 +1,28 @@
 import {
   geminiBackend
-} from "../../chunk-UB7GS7XT.js";
-import {
-  createGeminiTranslator
-} from "../../chunk-S3JRZFF5.js";
-import {
-  buildGeminiArgs
-} from "../../chunk-IBYOMAZ3.js";
+} from "../../chunk-A3FQHVUG.js";
 import {
   buildGeminiAuthEnv
-} from "../../chunk-TJORQTH6.js";
+} from "../../chunk-KGOOCFQY.js";
 import {
   prepareGeminiOnSandbox
 } from "../../chunk-PAQ2JFVD.js";
+import {
+  createGeminiTranslator
+} from "../../chunk-S3JRZFF5.js";
 import {
   GEMINI_WRAPPER_PATH
 } from "../../chunk-PZ5EGY64.js";
+import {
+  buildGeminiArgs
+} from "../../chunk-IBYOMAZ3.js";
 import "../../chunk-YE2RMJY7.js";
-import "../../chunk-US26CY2Y.js";
+import "../../chunk-6EIONZ7F.js";
 import "../../chunk-HFDLUBWN.js";
-import "../../chunk-7U62OZSD.js";
-import "../../chunk-4ENK7S24.js";
-import "../../chunk-Q62QJXGO.js";
-import "../../chunk-HDLPEXWS.js";
+import "../../chunk-ZDDMPGN4.js";
+import "../../chunk-CXYMVLYK.js";
+import "../../chunk-AGIXZFHQ.js";
+import "../../chunk-S5CMAWEC.js";
 import "../../chunk-EZYKRG4W.js";
 import "../../chunk-2ESYSVXG.js";
 export {

package/dist/backends/opencode/args.js

@@ -1,7 +1,7 @@
 import {
   buildOpencodeArgs,
   wrapOpencodePrompt
-} from "../../chunk-P56WU3UT.js";
+} from "../../chunk-PDWLVL34.js";
 import "../../chunk-2ESYSVXG.js";
 export {
   buildOpencodeArgs,

package/dist/backends/opencode/auth.js

@@ -1,13 +1,13 @@
 import {
   buildOpencodeAuthEnv,
   validateOpencodeRuntime
-} from "../../chunk-JTGISCYV.js";
-import "../../chunk-US26CY2Y.js";
+} from "../../chunk-QCGIYXN4.js";
+import "../../chunk-6EIONZ7F.js";
 import "../../chunk-HFDLUBWN.js";
-import "../../chunk-7U62OZSD.js";
-import "../../chunk-4ENK7S24.js";
-import "../../chunk-Q62QJXGO.js";
-import "../../chunk-HDLPEXWS.js";
+import "../../chunk-ZDDMPGN4.js";
+import "../../chunk-CXYMVLYK.js";
+import "../../chunk-AGIXZFHQ.js";
+import "../../chunk-S5CMAWEC.js";
 import "../../chunk-2ESYSVXG.js";
 export {
   buildOpencodeAuthEnv,

package/dist/backends/opencode/index.js

@@ -1,32 +1,32 @@
 import {
   opencodeBackend
-} from "../../chunk-YS3W5AQA.js";
-import {
-  buildOpencodeArgs
-} from "../../chunk-P56WU3UT.js";
-import {
-  buildOpencodeAuthEnv
-} from "../../chunk-JTGISCYV.js";
+} from "../../chunk-REHIJQUD.js";
 import {
   buildOpencodeConfigEnv
 } from "../../chunk-V5DH3OAC.js";
 import {
   prepareOpencodeOnSandbox
 } from "../../chunk-URNG7ZX2.js";
+import {
+  createOpencodeTranslator
+} from "../../chunk-ETWGCBIQ.js";
 import {
   OPENCODE_WRAPPER_PATH,
   installOpencodeWrapper
 } from "../../chunk-UY3VT3HQ.js";
 import {
-  createOpencodeTranslator
-} from "../../chunk-ETWGCBIQ.js";
+  buildOpencodeArgs
+} from "../../chunk-PDWLVL34.js";
+import {
+  buildOpencodeAuthEnv
+} from "../../chunk-QCGIYXN4.js";
 import "../../chunk-YE2RMJY7.js";
-import "../../chunk-US26CY2Y.js";
+import "../../chunk-6EIONZ7F.js";
 import "../../chunk-HFDLUBWN.js";
-import "../../chunk-7U62OZSD.js";
-import "../../chunk-4ENK7S24.js";
-import "../../chunk-Q62QJXGO.js";
-import "../../chunk-HDLPEXWS.js";
+import "../../chunk-ZDDMPGN4.js";
+import "../../chunk-CXYMVLYK.js";
+import "../../chunk-AGIXZFHQ.js";
+import "../../chunk-S5CMAWEC.js";
 import "../../chunk-EZYKRG4W.js";
 import "../../chunk-2ESYSVXG.js";
 export {

package/dist/backends/pi/args.js

@@ -1,6 +1,6 @@
 import {
   buildPiArgs
-} from "../../chunk-6KWJASEO.js";
+} from "../../chunk-6SD6MC2B.js";
 import "../../chunk-2ESYSVXG.js";
 export {
   buildPiArgs

package/dist/backends/pi/auth.js

@@ -1,13 +1,13 @@
 import {
   buildPiAuthEnv,
   validatePiRuntime
-} from "../../chunk-IITCQTBZ.js";
-import "../../chunk-US26CY2Y.js";
+} from "../../chunk-T2PXAQND.js";
+import "../../chunk-6EIONZ7F.js";
 import "../../chunk-HFDLUBWN.js";
-import "../../chunk-7U62OZSD.js";
-import "../../chunk-4ENK7S24.js";
-import "../../chunk-Q62QJXGO.js";
-import "../../chunk-HDLPEXWS.js";
+import "../../chunk-ZDDMPGN4.js";
+import "../../chunk-CXYMVLYK.js";
+import "../../chunk-AGIXZFHQ.js";
+import "../../chunk-S5CMAWEC.js";
 import "../../chunk-2ESYSVXG.js";
 export {
   buildPiAuthEnv,

package/dist/backends/pi/index.js

@@ -1,28 +1,28 @@
 import {
   piBackend
-} from "../../chunk-Y3V4COP7.js";
+} from "../../chunk-J7F2OFWQ.js";
+import {
+  createPiTranslator
+} from "../../chunk-B6E6BVNK.js";
 import {
   buildPiArgs
-} from "../../chunk-6KWJASEO.js";
+} from "../../chunk-6SD6MC2B.js";
 import {
   buildPiAuthEnv
-} from "../../chunk-IITCQTBZ.js";
+} from "../../chunk-T2PXAQND.js";
 import {
   preparePiOnSandbox
 } from "../../chunk-CMOU2OFW.js";
-import {
-  createPiTranslator
-} from "../../chunk-B6E6BVNK.js";
 import {
   PI_WRAPPER_PATH
 } from "../../chunk-OGA7KDQZ.js";
 import "../../chunk-YE2RMJY7.js";
-import "../../chunk-US26CY2Y.js";
+import "../../chunk-6EIONZ7F.js";
 import "../../chunk-HFDLUBWN.js";
-import "../../chunk-7U62OZSD.js";
-import "../../chunk-4ENK7S24.js";
-import "../../chunk-Q62QJXGO.js";
-import "../../chunk-HDLPEXWS.js";
+import "../../chunk-ZDDMPGN4.js";
+import "../../chunk-CXYMVLYK.js";
+import "../../chunk-AGIXZFHQ.js";
+import "../../chunk-S5CMAWEC.js";
 import "../../chunk-EZYKRG4W.js";
 import "../../chunk-2ESYSVXG.js";
 export {

package/dist/backends/registry.js

@@ -1,53 +1,53 @@
 import {
   listBackends,
   resolveBackend
-} from "../chunk-XMZQW5G5.js";
-import "../chunk-Y3V4COP7.js";
-import "../chunk-6KWJASEO.js";
-import "../chunk-IITCQTBZ.js";
-import "../chunk-CMOU2OFW.js";
+} from "../chunk-V5RHOS43.js";
+import "../chunk-J7F2OFWQ.js";
 import "../chunk-B6E6BVNK.js";
+import "../chunk-6SD6MC2B.js";
+import "../chunk-T2PXAQND.js";
+import "../chunk-CMOU2OFW.js";
 import "../chunk-OGA7KDQZ.js";
-import "../chunk-YS3W5AQA.js";
-import "../chunk-P56WU3UT.js";
-import "../chunk-JTGISCYV.js";
+import "../chunk-A3FQHVUG.js";
+import "../chunk-KGOOCFQY.js";
+import "../chunk-PAQ2JFVD.js";
+import "../chunk-S3JRZFF5.js";
+import "../chunk-PZ5EGY64.js";
+import "../chunk-REHIJQUD.js";
 import "../chunk-V5DH3OAC.js";
 import "../chunk-URNG7ZX2.js";
-import "../chunk-UY3VT3HQ.js";
 import "../chunk-ETWGCBIQ.js";
-import "../chunk-MZ6HBYGV.js";
+import "../chunk-UY3VT3HQ.js";
+import "../chunk-PDWLVL34.js";
+import "../chunk-QCGIYXN4.js";
+import "../chunk-65XY7HRS.js";
+import "../chunk-TPMZO6S2.js";
+import "../chunk-M72ERPMT.js";
 import "../chunk-AQHYCRTO.js";
 import "../chunk-7TSTCMII.js";
 import "../chunk-KJ2GJLPQ.js";
-import "../chunk-UB7GS7XT.js";
-import "../chunk-S3JRZFF5.js";
 import "../chunk-IBYOMAZ3.js";
-import "../chunk-TJORQTH6.js";
-import "../chunk-PAQ2JFVD.js";
-import "../chunk-PZ5EGY64.js";
-import "../chunk-VVCRJ46V.js";
+import "../chunk-WEUPM3IN.js";
 import "../chunk-PJYCPDV5.js";
-import "../chunk-YMKQJY5F.js";
+import "../chunk-SIO4LO2M.js";
 import "../chunk-NMZMRH3E.js";
-import "../chunk-CULYZ3VA.js";
 import "../chunk-XJYR5HE3.js";
-import "../chunk-TPMZO6S2.js";
-import "../chunk-MNW6D7T4.js";
-import "../chunk-WG3N6VUA.js";
-import "../chunk-GSDVHR43.js";
-import "../chunk-YE2RMJY7.js";
-import "../chunk-CY6AWCC6.js";
+import "../chunk-CULYZ3VA.js";
+import "../chunk-JN3DHH7Z.js";
 import "../chunk-VRRGSQI7.js";
 import "../chunk-D6RQPBRG.js";
+import "../chunk-YJCH35J4.js";
+import "../chunk-YE2RMJY7.js";
+import "../chunk-CY6AWCC6.js";
 import "../chunk-FX2AEKOV.js";
 import "../chunk-J6T3W6RY.js";
 import "../chunk-F4WUVOLE.js";
-import "../chunk-US26CY2Y.js";
+import "../chunk-6EIONZ7F.js";
 import "../chunk-HFDLUBWN.js";
-import "../chunk-7U62OZSD.js";
-import "../chunk-4ENK7S24.js";
-import "../chunk-Q62QJXGO.js";
-import "../chunk-HDLPEXWS.js";
+import "../chunk-ZDDMPGN4.js";
+import "../chunk-CXYMVLYK.js";
+import "../chunk-AGIXZFHQ.js";
+import "../chunk-S5CMAWEC.js";
 import "../chunk-EZYKRG4W.js";
 import "../chunk-7XQLG5P2.js";
 import "../chunk-2ESYSVXG.js";

package/dist/{chunk-33QZ6KIY.js → chunk-25E64UIV.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-23UKWXJH.js";
 import {
   reviewSessions
-} from "./chunk-JCIAIJFF.js";
+} from "./chunk-IC2ETYU5.js";
 import {
   archiveMemoryStore,
   createMemoryStore,
@@ -20,19 +20,19 @@ import {
   redactMemoryVersion,
   updateMemory,
   updateMemoryStore
-} from "./chunk-GNXIA5WC.js";
+} from "./chunk-TVV7AE3G.js";
 import {
   jsonOk,
   paginatedOk,
   routeWrap
-} from "./chunk-DI5WC2SQ.js";
+} from "./chunk-4EKHW6VS.js";
 import {
   getConfig
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 import {
   getDb,
   init_client
-} from "./chunk-Q62QJXGO.js";
+} from "./chunk-AGIXZFHQ.js";
 import {
   badRequest,
   conflict,

package/dist/{chunk-PZKWZKRP.js → chunk-2KF2TIEY.js}

@@ -1,18 +1,18 @@
 import {
   onAfterCommit
-} from "./chunk-2K3UO6TC.js";
+} from "./chunk-RES4BCTF.js";
 import {
   getSessionRow
-} from "./chunk-GBJ3OT4D.js";
+} from "./chunk-ZC7OR65K.js";
 import {
   listEventsByTrace
-} from "./chunk-IS6CQPAQ.js";
+} from "./chunk-OEFJPZYH.js";
 import {
   getAgent
-} from "./chunk-ENFWZ2QM.js";
+} from "./chunk-6U6HEVSN.js";
 import {
   getConfig
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 
 // src/observability/otlp.ts
 import { createHash } from "crypto";

package/dist/{chunk-CXXL77ER.js → chunk-2R4IT7HG.js}

@@ -1,19 +1,20 @@
 import {
   loadVaultForCaller
-} from "./chunk-QBZMVYDV.js";
+} from "./chunk-GFZ2WIVH.js";
 import {
   jsonOk,
   paginatedOk,
   routeWrap
-} from "./chunk-DI5WC2SQ.js";
+} from "./chunk-4EKHW6VS.js";
 import {
   archiveCredential,
   createCredential,
   deleteCredential,
   getCredential,
+  getRefreshConfig,
   listCredentials,
   updateCredential
-} from "./chunk-RZHIYTI3.js";
+} from "./chunk-WK33IBKY.js";
 import {
   badRequest,
   conflict,
@@ -207,6 +208,61 @@ function handleDeleteCredential(request, vaultId, credentialId) {
     return jsonOk({ id: credentialId, type: "vault_credential_deleted" });
   });
 }
+function handleMcpOauthValidate(request, vaultId, credentialId) {
+  return routeWrap(request, async ({ auth }) => {
+    loadVaultForCaller(auth, vaultId);
+    const cred = getCredential(credentialId);
+    if (!cred || cred.vault_id !== vaultId) throw notFound(`credential not found: ${credentialId}`);
+    if (cred.auth.type !== "mcp_oauth") {
+      throw badRequest("credential is not mcp_oauth type");
+    }
+    const config = getRefreshConfig(credentialId);
+    if (!config) throw badRequest("credential has no refresh configuration");
+    const body = new URLSearchParams({
+      grant_type: "refresh_token",
+      client_id: config.client_id,
+      refresh_token: config.refresh_token,
+      ...config.scope ? { scope: config.scope } : {}
+    });
+    const headers = {
+      "Content-Type": "application/x-www-form-urlencoded"
+    };
+    if (config.token_endpoint_auth?.type === "client_secret_basic") {
+      headers.Authorization = `Basic ${btoa(`${config.client_id}:${config.token_endpoint_auth.client_secret}`)}`;
+    } else if (config.token_endpoint_auth?.client_secret) {
+      body.set("client_secret", config.token_endpoint_auth.client_secret);
+    }
+    try {
+      const res = await fetch(config.token_endpoint, {
+        method: "POST",
+        headers,
+        body: body.toString(),
+        signal: AbortSignal.timeout(15e3)
+      });
+      if (res.ok) {
+        return jsonOk({
+          type: "mcp_oauth_validation_result",
+          credential_id: credentialId,
+          valid: true
+        });
+      }
+      const errText = await res.text().catch(() => "");
+      return jsonOk({
+        type: "mcp_oauth_validation_result",
+        credential_id: credentialId,
+        valid: false,
+        error: `token endpoint returned ${res.status}: ${errText.slice(0, 200)}`
+      });
+    } catch (err) {
+      return jsonOk({
+        type: "mcp_oauth_validation_result",
+        credential_id: credentialId,
+        valid: false,
+        error: err instanceof Error ? err.message : "token endpoint unreachable"
+      });
+    }
+  });
+}
 
 export {
   handleCreateCredential,
@@ -214,5 +270,6 @@ export {
   handleGetCredential,
   handleUpdateCredential,
   handleArchiveCredential,
-  handleDeleteCredential
+  handleDeleteCredential,
+  handleMcpOauthValidate
 };