DocsLog in

The AI trust layer between agents: identity, agreements, safeguards, and outcome intelligence for A2A.

Commit 7ef7c699

7ef7c69958caMerged

aryaamin <[email protected]> · 2 months ago · 7 files · +2 added · ~5 modified

Browse files at this commit

Description

fix: proxy MCP OAuth discovery through OpenClasp

Details

Commit
7ef7c69958ca
Parent
db34577898cf

api/mcp.tsmodifiedView file

@@ -70,6 +70,7 @@
7070 }
7171 const authentication = await verifyAuth0Token(bearerToken, {
7272 dashboard: false,
73+ requiredScopes: ['mcp:access'],
7374 });
7475 return {
7576 token: bearerToken,
@@ -106,7 +107,7 @@
106107 const headers = new Headers(response.headers);
107108 headers.set(
108109 'www-authenticate',
109- `Bearer resource_metadata="${new URL(resourceMetadataPath, publicOrigin).href}"`,
110+ `Bearer resource_metadata="${new URL(resourceMetadataPath, publicOrigin).href}", scope="mcp:access"`,
110111 );
111112 headers.set('cache-control', 'no-store');
112113 headers.delete('content-length');