Skip to content

feat(mcp): authenticate and track Claude Code plugin - #3028

Open
enesgules wants to merge 11 commits into
masterfrom
abdullah/mcp-plugin-client-auth-0e65
Open

feat(mcp): authenticate and track Claude Code plugin#3028
enesgules wants to merge 11 commits into
masterfrom
abdullah/mcp-plugin-client-auth-0e65

Conversation

@enesgules

@enesgules enesgules commented Aug 12, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • Require authentication for the Claude Code plugin.
  • Use CONTEXT7_API_KEY when set; otherwise use OAuth.
  • Track claude-code and claude-code-plugin separately.

Validation

  • pnpm --filter ctx7 test
  • pnpm --filter @upstash/context7-mcp test
  • pnpm --filter @upstash/context7-mcp typecheck
  • pnpm --filter @upstash/context7-mcp lint
  • claude plugin validate --strict .
  • Claude Code checks with and without CONTEXT7_API_KEY

Plugin hosts such as Claude Code only start OAuth for servers that 401 at
connect time. Matching Exa MCP, ?client=claude-code-plugin (any client
value containing "plugin") now gates /mcp the same way /mcp/oauth does,
while anonymous access on the public URL is unchanged.

Co-authored-by: Enes Gules <enesgules@users.noreply.github.com>
@mintlify

mintlify Bot commented Aug 12, 2026

Copy link
Copy Markdown

Preview deployment for your docs. Learn more about Mintlify Previews.

Project Status Preview Updated (UTC)
context7 🟢 Ready View Preview Aug 12, 2026, 10:12 PM

💡 Tip: Enable Workflows to automatically generate PRs for you.

cursoragent and others added 2 commits August 12, 2026 22:12
The v2 helpers (bearerAuthChallengeResponse, oauthMetadataResponse) assume
Bearer-only OAuth on a fetch() handler. This server also accepts API keys,
mixes anonymous and required routes, returns JSON-RPC 401 bodies, and
proxies authorization-server metadata live, so they are not a drop-in.

Co-authored-by: Enes Gules <enesgules@users.noreply.github.com>
The ?client=claude-code-plugin gate stays in the server and Claude plugin
URL. OAuth docs continue to describe /mcp/oauth only.

Co-authored-by: Enes Gules <enesgules@users.noreply.github.com>
@fahreddinozcan fahreddinozcan changed the title feat(mcp): require auth on /mcp for plugin clients feat(mcp): authenticate and track Claude Code plugin Aug 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants