Chris CoutinhoandClaude Opus 4.6 2c0b764aae fix: strip resource server prefix from JWT scopes for tool filtering ...

External IdPs like AWS Cognito return scopes prefixed with the resource
server identifier (e.g. https://mcp.example.com/notes.read). MCP tools
use bare scope names (notes.read) in @require_scopes decorators. Without
stripping the prefix, scope matching fails and only identity-only tools
(openid/profile/email) are visible — resulting in 4/125 tools shown.

Strip the OIDC_RESOURCE_SERVER_ID prefix in both get_access_token_scopes()
(used by list_tools filtering) and the require_scopes decorator (used at
tool execution time).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-08 01:27:06 +02:00

..

alembic

refactor: change OAuth scope separator from colon to dot for IDP compatibility

2026-04-07 10:07:02 +02:00

api

refactor: remove RFC 8693 token exchange and Keycloak OAuth implementation

2026-04-03 00:22:20 +02:00

auth

fix: strip resource server prefix from JWT scopes for tool filtering

2026-04-08 01:27:06 +02:00

client

fix: convert BDAY datetime.date to string before Pydantic validation

2026-04-01 09:11:45 +02:00

controllers

fix: return all notes when search query is empty

2025-11-13 21:57:14 +01:00

document_processors

fix(mcp): Move all imports to the top of modules

2025-12-26 10:05:27 -06:00

embedding

fix(mcp): Move all imports to the top of modules

2025-12-26 10:05:27 -06:00

models

refactor: change OAuth scope separator from colon to dot for IDP compatibility

2026-04-07 10:07:02 +02:00

observability

refactor: change OAuth scope separator from colon to dot for IDP compatibility

2026-04-07 10:07:02 +02:00

providers

fix: resolve all type checking errors (8 errors fixed)

2025-12-08 01:09:02 +01:00

search

refactor: enforce PLC0415 (import-outside-top-level) for source code

2026-02-20 08:04:50 +01:00

server

Merge pull request #689 from cbcoutinho/feat/stdio-transport

2026-04-08 00:09:49 +02:00

utils

feat: Add text processing background worker for telling client about progress

2025-10-25 19:52:45 +02:00

vector

refactor: change OAuth scope separator from colon to dot for IDP compatibility

2026-04-07 10:07:02 +02:00

__init__.py

Initial commit

2025-05-04 23:24:55 +02:00

app.py

fix: address PR review feedback and fix CI test failures

2026-04-07 23:03:12 +02:00

cli.py

feat: add --version option to CLI

2026-04-08 00:24:50 +02:00

config_validators.py

refactor: remove RFC 8693 token exchange and Keycloak OAuth implementation

2026-04-03 00:22:20 +02:00

config.py

fix: address second round of PR review for scope prefix

2026-04-07 16:58:29 +02:00

context.py

fix: address third round of review feedback

2026-04-07 23:59:39 +02:00

http.py

feat: add self-signed SSL certificate support for Nextcloud connections

2026-02-16 09:21:21 +01:00

migrations.py

refactor: enforce PLC0415 (import-outside-top-level) for source code

2026-02-20 08:04:50 +01:00

stdio.py

fix: address third round of review feedback

2026-04-07 23:59:39 +02:00