releases.sh
← What's New

MCP clients complete OAuth; Bearer forwarding fixed

Fixed

  • Generic MCP clients (MCPJam and similar) can now complete OAuth against the hosted MCP server — extra grant types are intersected rather than rejected, unrecognized scopes are dropped, and both the origin and /mcp path are accepted as valid resource identifiers. Follow tools that forward the caller's Bearer token to the REST API now work end-to-end.