Patrick Buckley 891c8b1785 docs(mcp): operator guide for oauth_obo single-credential sign-in passthrough (slice 5) ...

Adds the oauth_obo section to docs/mcp-oauth.md:
- when to use it vs oauth_user (mode table row)
- deployment config ([oidc] capture_user_credential + obo_grant_profile,
  encryption-key requirement)
- per-IdP setup: Entra (delegated permissions + admin consent, plus the
  verified admin-consent-propagation AADSTS65001 gotcha) and Keycloak
  RFC 8693 (standard token exchange + audience client scopes)
- revocation & custody model: identity-unlink cuts a user off (credential
  + cache purge); flush-cache is an honest re-mint, not a revoke; per-server
  revocation is IdP-governed
- auth-type-transition + troubleshooting table rows for obo
- interim #682 note (Entra pre-authorized-clients removes the second
  consent for plain oauth_user, tenant-config only)

Refs #551.

2026-07-12 19:03:35 -07:00

..

assets

docs(readme): refresh hero image to coordinator UX shot

2026-04-29 00:13:48 -07:00

design

fix(approve): apply Copilot feedback + remove plan doc

2026-04-27 11:41:14 -07:00

diagrams

refactor(tools): remove man, math, and plan_agent built-in tools

2026-05-31 19:54:43 -07:00

operations

feat(mcp): admin status, deferred-consent persistence, operator docs (Phase 9) (#516)

2026-05-12 13:15:09 -07:00

skills/import-conversation-history

docs(skills): add import-conversation-history SKILL.md

2026-05-01 16:16:17 -07:00

api-reference.md

fix(providers): align GPT-5.6 with the GA API surface

2026-07-10 15:59:40 -07:00

architecture.md

fix(providers): align GPT-5.6 with the GA API surface

2026-07-10 15:59:40 -07:00

bulk-endpoints.md

feat(cancel): honest cancellation dispositions + coordinator subtree propagation

2026-06-26 03:28:06 -07:00

channels.md

refactor(tools): remove man, math, and plan_agent built-in tools

2026-05-31 19:54:43 -07:00

console.md

docs(personas): accuracy sweep — spec models, protocol contracts, page corrections

2026-07-03 00:29:26 -07:00

coordinator-api-tour.md

docs(personas): accuracy sweep — spec models, protocol contracts, page corrections

2026-07-03 00:29:26 -07:00

coordinator-skills.md

refactor(personas): file-backed built-in prompts, explicit source column

2026-07-03 00:29:26 -07:00

docker.md

refactor(eval): split measurement core from prompt optimizer

2026-07-03 16:39:31 -07:00

eval.md

refactor(eval): split measurement core from prompt optimizer

2026-07-03 16:39:31 -07:00

governance.md

fix(providers): align GPT-5.6 with the GA API surface

2026-07-10 15:59:40 -07:00

judge.md

fix(judge): thread model-definition capabilities into judge completions

2026-07-11 17:53:24 -07:00

mcp-oauth.md

docs(mcp): operator guide for oauth_obo single-credential sign-in passthrough (slice 5)

2026-07-12 19:03:35 -07:00

mcp-registry.md

docs: audit documentation for 1.4 / 1.5 state

2026-04-16 16:01:24 -07:00

memory.md

docs(personas): accuracy sweep — spec models, protocol contracts, page corrections

2026-07-03 00:29:26 -07:00

oidc.md

feat(oidc): allow_private_network opt-in for self-hosted IdPs

2026-07-06 21:52:42 -07:00

openshell.md

feat(web-search): replace Tavily/DuckDuckGo backends with self-hosted SearxNG

2026-05-31 19:03:16 -07:00

personas.md

feat(personas): agent discoverability + forgiving name resolution

2026-07-06 19:58:36 -07:00

pgbouncer.md

chore: relicense BUSL-1.1 → Apache 2.0 for 1.6.0 (#651)

2026-06-10 21:03:16 -07:00

releasing.md

docs: 1.6.0 changelog + release-track policy (#653)

2026-06-10 22:19:58 -07:00

sdk.md

docs(personas): accuracy sweep — spec models, protocol contracts, page corrections

2026-07-03 00:29:26 -07:00

security.md

refactor(tools): remove man, math, and plan_agent built-in tools

2026-05-31 19:54:43 -07:00

settings.md

feat(console): verbosity and reasoning-mode controls in the model shelf

2026-07-10 15:59:40 -07:00

tls.md

feat(compose): let bare-metal turnstone-servers join the cluster (incl. mTLS)

2026-06-15 03:41:24 -07:00

tools.md

feat(tools): allow_private_network opt-in for private-address fetch/preview

2026-07-07 08:20:57 -07:00