kolaente 3ec2d89543 feat(mcp): add streamable-http endpoint skeleton ... Mount /api/v1/mcp (and /api/v1/mcp/*) inside the authenticated route group. Reject JWT-authed requests with 401 (token-only policy), reject API tokens without the mcp:access scope with 403, and propagate the authed *user.User + *models.APIToken to r.Context() via typed keys so downstream tool handlers can pull them out without depending on Echo. The MCP protocol — JSON-RPC framing, Mcp-Session-Id management, SSE streaming — is delegated to github.com/modelcontextprotocol/go-sdk v1.6.1. tools/list returns {"tools": []} since no tools are registered yet.		2026-05-26 23:08:45 +02:00
..
auth	fix(oauth2server): accept all loopback redirect forms	2026-05-07 22:03:49 +00:00
avatar	feat(avatar): use distinct marble palette for bot users	2026-05-01 14:44:10 +00:00
background	fix: add timeouts to Gravatar, Unsplash, and SSRF-safe HTTP clients	2026-04-09 07:31:08 +00:00
dump	chore(lint): suppress known gosec false positives	2026-03-23 16:23:15 +01:00
keyvalue	fix: fatal with clear message when keyvalue type is redis but redis is not enabled	2026-04-12 09:43:31 +00:00
mcp	feat(mcp): add streamable-http endpoint skeleton	2026-05-26 23:08:45 +02:00
migration	test(trello): drop redundant BackgroundImage assignment in getTestBoard	2026-05-15 15:16:11 +00:00