Add Archi MCP server, authenticated external MCP support, and Mattermost SSO/RBAC integration#543

Draft

hassan11196 wants to merge 31 commits intoarchi-physics:mainfrom

hassan11196:mcp-with-on-demand-tokens

Commits on Mar 16, 2026

add archi MCP server
hassan11196
committed
fix default archi port to 7861 (chat service default)
hassan11196
committed
make archi-mcp configurable from archi config YAML
hassan11196
committed
feat: add built-in MCP SSE endpoint to the chat service
hassan11196
committed
remove archi_mcp standalone package
hassan11196
committed
feat: SSO-gated MCP access with bearer token auth
hassan11196
committed
feat: add OAuth2 PKCE authorization server for MCP clients
hassan11196
committed
fix: address security and efficiency issues in OAuth2 PKCE endpoints
hassan11196
committed
fix: reuse existing SSO in /authorize instead of bouncing through login page
hassan11196
committed
fix: pass message in correct format to wrapper.chat in MCP tool query
hassan11196
committed
feat: add Claude Desktop and Claude Code tabs to MCP auth page
hassan11196
committed
chore: remove unused api_key from mcp_server config
hassan11196
committed
feat: update MCP server configuration to use npx command with remote arguments
hassan11196
committed
fix: propagate SSO user_id through MCP request pipeline to conversation_metadata
hassan11196
committed
Move MCP OAuth endpoints under /mcp/oauth/* and add dynamic client registration
hassan11196
committed
make MCP server opt-in via services.mcp_server.enabled
hassan11196
committed
stream archi progress back to MCP clients via notifications/progress
hassan11196
committed
fix: call wrapper.chat.stream() instead of wrapper.stream() in mcp_sse
hassan11196
committed
fix: dispatch tools/call in background thread; log progressToken presence
hassan11196
committed
fix: always use streaming pipeline in MCP tool query
hassan11196
committed
fix: stop accumulating chunk events — content is accumulated not delta
hassan11196
committed
fix: add /.well-known/oauth-protected-resource (RFC 8707)
hassan11196
committed
fix: send absolute URL in SSE endpoint event; add session/method logging
hassan11196
committed
fix: skip Bearer re-auth on /mcp/messages; fix proxy URL in endpoint event
hassan11196
committed
fix: use services.mcp_server.url as authoritative public URL for endpoint event
hassan11196
committed
fix: use services.mcp_server.url for all MCP public URLs; trim verbose comments
hassan11196
committed
perf: cache banner alerts for 30 s to avoid DB hit on every template render
hassan11196
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add Archi MCP server, authenticated external MCP support, and Mattermost SSO/RBAC integration#543

Add Archi MCP server, authenticated external MCP support, and Mattermost SSO/RBAC integration#543
hassan11196 wants to merge 31 commits intoarchi-physics:mainfrom
hassan11196:mcp-with-on-demand-tokens

Commits on Mar 16, 2026

add archi MCP server

fix default archi port to 7861 (chat service default)

make archi-mcp configurable from archi config YAML

feat: add built-in MCP SSE endpoint to the chat service

remove archi_mcp standalone package

feat: SSO-gated MCP access with bearer token auth

feat: add OAuth2 PKCE authorization server for MCP clients

fix: address security and efficiency issues in OAuth2 PKCE endpoints

fix: reuse existing SSO in /authorize instead of bouncing through login page

fix: pass message in correct format to wrapper.chat in MCP tool query

feat: add Claude Desktop and Claude Code tabs to MCP auth page

chore: remove unused api_key from mcp_server config

feat: update MCP server configuration to use npx command with remote arguments

fix: propagate SSO user_id through MCP request pipeline to conversation_metadata

Move MCP OAuth endpoints under /mcp/oauth/* and add dynamic client registration

make MCP server opt-in via services.mcp_server.enabled

stream archi progress back to MCP clients via notifications/progress

fix: call wrapper.chat.stream() instead of wrapper.stream() in mcp_sse

fix: dispatch tools/call in background thread; log progressToken presence

fix: always use streaming pipeline in MCP tool query

fix: stop accumulating chunk events — content is accumulated not delta

fix: add /.well-known/oauth-protected-resource (RFC 8707)

fix: send absolute URL in SSE endpoint event; add session/method logging

fix: skip Bearer re-auth on /mcp/messages; fix proxy URL in endpoint event

fix: use services.mcp_server.url as authoritative public URL for endpoint event

fix: use services.mcp_server.url for all MCP public URLs; trim verbose comments

perf: cache banner alerts for 30 s to avoid DB hit on every template render

Commits on Mar 17, 2026

mcp: pass client_timeout and config_name from archi_query tool arguments

Refactor metadata query parsing and improve error handling; add unit tests for MCP SSE tools

Commits on Mar 31, 2026

feat: add MCP OAuth2/SSO support and CERN Mattermost integration

Merge branch 'claude/archi-mcp-server-Rjy9q' into mcp-with-on-demand-tokens