feat(burn): expose native MCP with personal tokens - #29
Draft
aviyashchin wants to merge 2 commits into
Draft
aviyashchin wants to merge 2 commits into
aviyashchin wants to merge 2 commits into
Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
aviyashchin
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Outcome
Expose the existing native Onyx MCP server through Burn's API proxy. Each request uses a personal token and native Onyx permissions. Reuses the pinned backend image and FastMCP. No custom OAuth broker or application rewrite.
Adds one bounded Compose service and nginx routes for
/mcpand/mcp/. The frontend strips the trailing slash, so both forms are required. Disables query-bearing INFO logs and extra file logging for the service. Updates the Auth0 gateway canary to expect the now-live canonical callback.Tracks #21 (shared identity and native per-user access). Keeps #21 open for authenticated tool calls, cross-user denial and monitoring proof.
Validation
795f8e36-b07e-4e8b-a9c3-73f15945858d:{"native_health":"pass","missing_token":"denied","invalid_token":"denied"}.796e7fdc-e5f1-4f43-90c8-f9d96aea8f75, exit 0:git diff --checkand Python compile check passed.Remaining acceptance
A user PAT must complete initialize, tools/list and a useful tool call. Public API-path access is blocked by this agent's network/browser policy, so loopback gateway proof is not public end-to-end proof. The user credential handoff is pending. Keep this draft until live positive acceptance and required CI are complete.