@kadoa/mcp 0.5.32 → 0.6.0-rc.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +10 -0
- package/dist/index.js +1087 -151
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -376,6 +376,16 @@ KADOA_PUBLIC_API_URI=http://localhost:12380 bun run dev
|
|
|
376
376
|
|
|
377
377
|
The server starts in HTTP mode. You authenticate via OAuth the same way as with the remote server.
|
|
378
378
|
|
|
379
|
+
### HTTP server environment variables
|
|
380
|
+
|
|
381
|
+
Opaque OAuth bearer tokens are routed to the existing OAuth verifier. RS256 Kadoa access tokens (Public API tokens, including delegated Kadoa Assistant tokens) additionally require:
|
|
382
|
+
|
|
383
|
+
| Variable | Description | If unset |
|
|
384
|
+
|---|---|---|
|
|
385
|
+
| `MCP_AUTH_ISSUER` | Issuer of Public API RS256 access tokens, `https://api.kadoa.com/v5/auth` | RS256 bearers rejected |
|
|
386
|
+
| `MCP_AUTH_JWKS_URL` | JWKS of that issuer, `https://api.kadoa.com/v5/auth/.well-known/jwks.json` | RS256 bearers rejected |
|
|
387
|
+
| `MCP_AUTH_AUDIENCE` | This pod's exact resource URL, e.g. `https://beta.mcp.kadoa.com/mcp` — must match the pod actually serving the request; a value copied from another pod's config cross-accepts that pod's tokens | RS256 bearers rejected |
|
|
388
|
+
|
|
379
389
|
## Contributing
|
|
380
390
|
|
|
381
391
|
A typical feature touches three repos — **`kadoa-backend` → `kadoa-sdks` → `kadoa-mcp`**. The same surgery on three layers; same operation, different audience above it.
|