2 Commits

Include renames

Author	SHA1	Message	Date
sandrodachandClaude Opus 5.5	c6f28aa816	feat(mcp): operators can switch MCP (and OAuth) off ... Admin switch in the system settings, MCP_ENABLED fixes it. Off: the endpoint answers 404, OAuth is off, the API key settings hide the MCP tab. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-11-01 21:11:53 +01:00
sandrodachandClaude Opus 5.5	75aea4a7d4	feat(mcp): OAuth so claude.ai and ChatGPT can connect as connectors ... MindSift becomes the OAuth authorization server for its own MCP endpoint: discovery (RFC 9728/8414), dynamic client registration, authorization code with PKCE (S256), rotating refresh tokens with reuse detection. The consent page lives in the app at /oauth/authorize. A grant is an api_keys entry (kind 'oauth'), so scopes, origin badges, renaming and revoking work as for keys; tokens are valid for /mcp only. Unused connections expire after OAUTH_IDLE_DAYS (default 90). Requires BASE_URL; off in demo mode. Release 0.51.0. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-11-01 20:01:32 +01:00