@mcpcloud/cli 0.24.0-next-20260917223827 → 0.24.0

package/README.md

@@ -506,7 +506,7 @@ _Generated from the live command tree by `bun run docs:readme` — do not edit b
 | `mcp servers deps list [server]` | List the servers this one composes. |
 | `mcp servers deps rm <server> <dependencyId>` | Remove a composed dependency (id from `deps list`). |
 | `mcp servers end-user` | Read and set a server's end-user plane: the access switch and the tool allowlist customers may call. |
-| `mcp servers end-user get <server>` | Show the end-user access configuration: switch, connect page, allowed tools, branding and sign-in federation. |
+| `mcp servers end-user get <server>` | Show the end-user access configuration: switch, connect page, allowed tools, branding, and how customers sign in. |
 | `mcp servers end-user set <server>` | Enable or disable end-user access, and/or replace the tool allowlist. |
 | `mcp servers env` | Manage server runtime environment bindings (encrypted secrets injected by the proxy). |
 | `mcp servers env get <server> <bindingName>` | Show metadata for one env binding. Plaintext is never returned — values are write-only. |

package/dist/index.js

@@ -6178,10 +6178,25 @@ async function readEndUserAccess(serverRef, opts) {
     serverId
   });
 }
+function describeSignInMode(data) {
+  const upstream = data.upstreamSignIn;
+  const provider = upstream?.providerLabel ?? "the OAuth provider";
+  switch (data.signInMode) {
+    case "federation":
+      return "federation — your own sign-in hands customers over";
+    case "upstream":
+      return `${provider} — customers sign in with your OAuth provider`;
+    case "account":
+      return upstream?.enabled && !upstream.available ? "MCPCloud account — customer sign-in is on but unfinished" : "MCPCloud account (default)";
+    default:
+      return "unknown — this deployment does not report it";
+  }
+}
 function printEndUserAccess(data) {
   printKeyValue({
     server: `${data.server.name} (${data.server.id})`,
     access: data.endUserAccess,
+    "sign-in mode": describeSignInMode(data),
     "connect page": data.connectPageUrl ?? "—",
     "allowed tools": data.allowedTools.length > 0 ? `${data.allowedTools.length}: ${data.allowedTools.join(", ")}` : "none — end users can call nothing",
     "display name": data.branding?.displayName ?? "—",
@@ -6189,7 +6204,8 @@ function printEndUserAccess(data) {
     accent: data.branding?.accentColor ?? "—",
     support: data.branding?.supportUrl ?? "—",
     "sign-in federation": data.signIn.configured ? `${data.signIn.status} (${data.signIn.issuer}, keys via ${data.signIn.keySource})` : "not configured",
-    "sign-in url": data.signIn.signInUrl ?? "—"
+    "sign-in url": data.signIn.signInUrl ?? "—",
+    "customer sign-in": data.upstreamSignIn?.identitySourceUrl ? `${data.upstreamSignIn.identitySourceUrl} → ${data.upstreamSignIn.identitySubjectPath ?? "(no path)"}` : "not configured"
   });
 }
 function parseToolList(raw) {
@@ -6210,7 +6226,7 @@ async function listServerToolNames(orgId, projectId, serverId) {
 }
 function registerServerEndUserCommands(servers) {
   const endUser = servers.command("end-user").alias("end-users").description("Read and set a server's end-user plane: the access switch and the tool allowlist customers may call.");
-  endUser.command("get <server>").description("Show the end-user access configuration: switch, connect page, allowed tools, branding and sign-in federation.").option("--org <organizationId>", "Organization ID").addHelpText("after", [
+  endUser.command("get <server>").description("Show the end-user access configuration: switch, connect page, allowed tools, branding, and how customers sign in.").option("--org <organizationId>", "Organization ID").addHelpText("after", [
     "",
     "End users are deny-by-default, so `allowed tools` is exhaustive — a",
     "tool missing from it cannot be called by a customer, whatever the",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mcpcloud/cli",
-  "version": "0.24.0-next-20260917223827",
+  "version": "0.24.0",
   "description": "The official CLI for MCPCloud — manage projects, servers, skills, and API keys from the terminal",
   "type": "module",
   "bin": {