Skip to content

MCP improvements - #5699

Merged
rekram1-node merged 5 commits into
anomalyco:devfrom
roerohan:fix-oauth-state
Dec 18, 2025
Merged

rekram1-node merged 5 commits into
anomalyco:devfrom
roerohan:fix-oauth-state

Conversation

@roerohan

Copy link
Copy Markdown
Contributor
  1. The state parameter is a random generated string now (as per OAuth 2.0 spec). We validate in the callback that the same string is received.
  2. Previously, if you changed the URL for an MCP server (with oauth enabled), it would stop working. For example, if you had a gitlab MCP server and you changed the URL from https://gitlab.com/mcp to https://gitlab.mycompany.com/mcp, it would not work. To make it work, you'd have to rename the MCP server (to gitlab-2 or something) or create a new one. This PR fixes that as well.
image

Tested locally.

Added URL tracking to MCP OAuth credentials to automatically invalidate auth when server URL changes. The auth provider now validates stored credentials against the current server URL, triggering re-authentication when the URL is updated in config.
@rekram1-node

Copy link
Copy Markdown
Collaborator

/review

@github-actions

Copy link
Copy Markdown
Contributor

lgtm

@rekram1-node
rekram1-node merged commit 7427b88 into anomalyco:dev Dec 18, 2025
3 checks passed
@roerohan
roerohan deleted the fix-oauth-state branch December 18, 2025 02:50
shuv1337 added a commit to shuv1337/shuvcode that referenced this pull request Dec 18, 2025
* docs: add opencode.cafe to ecosystem page (anomalyco#5714)

* chore: format code

* docs: add legal pages with privacy policy and terms of service links

* MCP improvements (anomalyco#5699)

* zen: error handling for stream requests

* feat(tui): add option to disable terminal title (anomalyco#5713)

* docs: add OPENCODE_DISABLE_TERMINAL_TITLE to environment variables (anomalyco#5725)

* chore: format code

* zen: error handling for stream requests

* tauri: server spawn fail dialog w/ copy logs button (anomalyco#5729)

* tauri: say OpenCode Server instead of OpenCode CLI

* fix: handle empty directory query parameter in server middleware (anomalyco#5732)

* release: v1.0.167

* sync: record last synced tag v1.0.167

---------

Co-authored-by: Ryan Vogel <n01508660@unf.edu>
Co-authored-by: GitHub Action <action@github.com>
Co-authored-by: Jay V <air@live.ca>
Co-authored-by: Rohan Mukherjee <roerohan@gmail.com>
Co-authored-by: Frank <frank@sst.dev>
Co-authored-by: Jake Nelson <jknlsn@users.noreply.github.com>
Co-authored-by: Jeon Suyeol <devxoul@gmail.com>
Co-authored-by: Brendan Allan <brendonovich@outlook.com>
Co-authored-by: opencode <opencode@sst.dev>
Co-authored-by: opencode-agent[bot] <opencode-agent[bot]@users.noreply.github.com>
rekram1-node pushed a commit that referenced this pull request Dec 27, 2025
Rwanbt pushed a commit to Rwanbt/unifia that referenced this pull request May 5, 2026
AIALRA-0 pushed a commit to AIALRA-0/opencode-turn-engine that referenced this pull request Jun 10, 2026
Rwanbt pushed a commit to Rwanbt/unifia that referenced this pull request Jun 14, 2026
MarsQiu007 referenced this pull request in MarsQiu007/openNovel Jul 31, 2026
meSingh pushed a commit to meSingh/opencode that referenced this pull request Sep 6, 2026
androidand pushed a commit to androidand/opencode-skein that referenced this pull request Sep 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants