Expand description
OAuth scopes and access-token validation for the MCP server at /api/v0/mcp.
MCP tokens are Bearer tokens issued to Client ID Metadata Document clients, bound by RFC 8707
to the MCP resource URL. A token’s rights are its scopes intersected with what its grant still
allows; the caller intersects them with the user’s live roles through authorize.
Structs§
- McpPrincipal
- Who an MCP request acts for, from a validated access token.
Enums§
- McpScope
- A capability an MCP token can carry.
Functions§
- authenticate_
mcp_ access_ token - Validates a Bearer access token for the MCP server and resolves who it acts for. Records the grant as used.