bvandeusenandClaude Opus 5.5
3474cdff46
MCP-8 #4972 "Connect card, docs, and end-to-end integration test". - AI access page: a "Connect a client" card with the /mcp URL (from Settings → General → Public base URL, else the request host) and recipes for Claude Code, Claude Desktop (mcp-remote) and other Streamable HTTP clients, plus the reverse-proxy note. The token-created page shows the same recipes with the new token filled in, ready to paste. - docs/core/mcp.md: connecting, the reverse-proxy requirements, the security model (token ceiling, default deny, check-mode default, secrets, audit), tools by role, response conventions, adding tools. docs/architecture.md describes the /mcp dispatch outside the blueprint pipeline; docs/reference/code-map.md gains an MCP section. - tests/integration/test_mcp.py: over HTTP, a viewer token lists no write tools and is refused one by name; an operator token reads get_overview and its maintenance-window create/end land in the audit log as "<user> via MCP" with the token id. (Revoked → 401 was already covered.) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
57 lines
2.9 KiB
HTML
57 lines
2.9 KiB
HTML
{#- How to point an AI client at /mcp. `mcp_url` is the endpoint; `token` is the
|
|
raw token on the page that just created one, else a placeholder. -#}
|
|
{% set tok = token or "stw_…your token…" %}
|
|
{% set pre = "background:var(--bg);padding:0.75rem;border-radius:4px;overflow-x:auto;font-size:0.78rem;color:var(--text);margin:0.5rem 0 0;white-space:pre;" %}
|
|
<div class="card" id="connect">
|
|
<div class="section-title" style="margin-bottom:0.5rem;">Connect a client</div>
|
|
<div style="font-size:0.85rem;color:var(--text-muted);line-height:1.55;margin-bottom:0.75rem;">
|
|
Steward's MCP endpoint. Clients send the token as
|
|
<code>Authorization: Bearer …</code> on every request.
|
|
</div>
|
|
<div style="display:flex;gap:0.5rem;align-items:center;margin-bottom:1rem;">
|
|
<input type="text" id="mcp-url" value="{{ mcp_url }}" readonly aria-label="MCP endpoint URL"
|
|
style="flex:1;font-family:ui-monospace,monospace;font-size:0.8rem;background:var(--bg);color:var(--text);">
|
|
<button type="button" class="btn btn-ghost btn-sm" style="white-space:nowrap;"
|
|
onclick="navigator.clipboard.writeText(document.getElementById('mcp-url').value).then(()=>this.textContent='Copied')">Copy</button>
|
|
</div>
|
|
|
|
<details open>
|
|
<summary style="cursor:pointer;font-weight:600;">Claude Code</summary>
|
|
<pre style="{{ pre }}">claude mcp add --transport http steward {{ mcp_url }} \
|
|
--header "Authorization: Bearer {{ tok }}"</pre>
|
|
</details>
|
|
|
|
<details style="margin-top:0.75rem;">
|
|
<summary style="cursor:pointer;font-weight:600;">Claude Desktop</summary>
|
|
<div style="font-size:0.8rem;color:var(--text-muted);margin-top:0.4rem;line-height:1.5;">
|
|
Add to <code>claude_desktop_config.json</code>. It bridges through
|
|
<code>mcp-remote</code>, which needs Node.js.
|
|
</div>
|
|
<pre style="{{ pre }}">{
|
|
"mcpServers": {
|
|
"steward": {
|
|
"command": "npx",
|
|
"args": ["mcp-remote", "{{ mcp_url }}",
|
|
"--header", "Authorization:${STEWARD_AUTH}"],
|
|
"env": { "STEWARD_AUTH": "Bearer {{ tok }}" }
|
|
}
|
|
}
|
|
}</pre>
|
|
</details>
|
|
|
|
<details style="margin-top:0.75rem;">
|
|
<summary style="cursor:pointer;font-weight:600;">Open WebUI and other clients</summary>
|
|
<div style="font-size:0.8rem;color:var(--text-muted);margin-top:0.4rem;line-height:1.5;">
|
|
Add an MCP server using the <strong>Streamable HTTP</strong> transport, with the URL
|
|
above and bearer authentication set to the token. In Open WebUI this is an external
|
|
tool connection of type MCP; menu names vary between versions.
|
|
</div>
|
|
</details>
|
|
|
|
<div style="font-size:0.78rem;color:var(--text-muted);margin-top:1rem;line-height:1.5;">
|
|
Behind a reverse proxy, the URL above comes from <strong>Settings → General → Public
|
|
base URL</strong> when it is set. The proxy must pass the <code>Authorization</code>
|
|
header through and not buffer responses, since replies stream.
|
|
</div>
|
|
</div>
|