jubnl bf23b2d2f2 fix(mcp): surface static token deprecation via server instructions ...

The deprecation warning was registered as an MCP prompt that clients
must explicitly fetch — it never fired automatically. Move it to the
ServerOptions.instructions field, which is returned in the initialize
response and automatically read by Claude and other MCP clients as
system context.

2026-04-10 02:18:06 +02:00

..

tools

feat(oauth): add trips:share scope and redesign consent screen

2026-04-10 00:55:12 +02:00

index.ts

fix(mcp): surface static token deprecation via server instructions

2026-04-10 02:18:06 +02:00

resources.ts

security(oauth): harden OAuth 2.1/MCP implementation (Critical + High + Medium findings)

2026-04-10 02:03:27 +02:00

scopes.ts

feat(oauth): add trips:share scope and redesign consent screen

2026-04-10 00:55:12 +02:00

sessionManager.ts

security(oauth): harden OAuth 2.1/MCP implementation (Critical + High + Medium findings)

2026-04-10 02:03:27 +02:00

tools.ts

feat(mcp): introduce OAuth 2.1 auth and enforce addon gating

2026-04-09 22:25:58 +02:00