Hive Hive
Sign in
Overview
Projects
Domains
Forage
Flights
Specs
Postmortems
Drops

feat(mcp): add Boruta-authenticated server

GitHub issue · Closed

Metadata
Source
tuist/hive #7
Updated
Jun 24, 2026
Domains
Hive
Details

Summary

  • Add a Boruta-backed OAuth authorization-code flow for MCP clients, including dynamic client registration and token issuance endpoints.
  • Expose MCP discovery metadata and protected-resource metadata under /.well-known.
  • Forward /mcp to an EMCP streamable HTTP server protected by Boruta bearer tokens with the mcp scope, with an initial authenticated whoami tool.
  • Add Boruta schema migrations, the mcp OAuth scope, runtime issuer configuration, and tests for discovery, registration, MCP auth challenge, and login return handling.

Testing

  • mix compile --warnings-as-errors
  • mix test
  • mix credo
Flights

Investigate, reproduce, or fix this item in an isolated repository. Each Flight preserves its outcome and agent session.

New Flights are paused Configure model inference, GitHub, and a sandbox provider to start another Flight. Existing results remain available below.
No Flights yet

Start a Flight and preserve its objective, outcome, and session here.

Comments

No GitHub comments yet.