Repository navigation
Conversation
Adds a remote MCP server at /mcp, authenticated with OAuth through Passport (dynamic client registration, authorization code with PKCE). Tools: read the log, show a commit, search users, commit or reply, star a commit, follow a user. They call the existing actions and queries. Passport's user_id columns are UUIDs to match the users table, and the device code grant is disabled. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
The deferred suggestedUsers shared prop made the consent page issue a second GET to /oauth/authorize, which replaced the session auth token and made approving fail with a 403. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Member
|
@nunomaduro This PR touches database migrations, authentication / permissions, new third-party dependencies, and configuration. Could you take a look? |
Resolve conflicts in User, AppServiceProvider and composer files, and adapt the MCP server to production: the everyone log is now latest, UserSearchQuery takes the viewer, and migrations no longer have down methods. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
kachelle
changed the title
MCP commits now take the same 4,000 characters as the app, with blank lines collapsed first. The consent page reads the user through useUser, PHPStan's errors in the MCP code are typed away, and tests cover the tool schemas, deleted commits in a thread and ambiguous hashes. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Contributor
Author
|
No more merge conflicts @xHeaven ! |
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
# Conflicts: # composer.lock
# Conflicts: # composer.json # composer.lock
Contributor
|
I'm not super convinced about this one. I don't know if there's much of a use case for having agents do things like star commits, etc. If this is really something people want, it might work better as a standalone project calling the API? |
Contributor
Author
|
@paulinevos , its more to easily be able to post from an agent. But you are maybe right, as in: this will lead to less quality commits. Its okay to close! Thanks! |
# Conflicts: # composer.lock
…er-resolve # Conflicts: # composer.lock
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
An mcp server at
POST /mcp, using OAuth with Passport.The tools call the existing actions and queries, and only see commits the user is allowed to see.
Try it locally:
claude mcp add --transport http devnull https://dev-null.test/mcp, then/mcp→devnull→ Authenticate.