Chris Farhood 5f2c55c865 mcp: CORS on the streamable-http app (answer OPTIONS preflight without auth) ...

OPTIONS /mcp returned 401 (auth layer rejecting the preflight) with no CORS
headers, which blocks browser-based MCP clients / connector setup. Build the app
explicitly and add CORSMiddleware (wildcard origin — bearer-token auth, no cookies)
so preflight is answered 200 and Mcp-Session-Id/WWW-Authenticate are exposed.

2026-07-06 22:13:36 -04:00

..

api

Fork intervals-mcp-server: native OAuth + streamable-HTTP, no monkeypatch

2026-07-04 15:07:46 -04:00

db

feat(db): Alembic migration for users table (async env, DATABASE_URL)

2026-07-04 19:35:55 -04:00

tools

feat(multi-tenant): resolve per-caller credentials in every tool

2026-07-04 19:28:27 -04:00

utils

Fork intervals-mcp-server: native OAuth + streamable-HTTP, no monkeypatch

2026-07-04 15:07:46 -04:00

__init__.py

Fork intervals-mcp-server: native OAuth + streamable-HTTP, no monkeypatch

2026-07-04 15:07:46 -04:00

auth.py

auth: accept EdDSA tokens + soft audience check (Better Auth compatibility)

2026-07-05 21:55:52 -04:00

config.py

Fork intervals-mcp-server: native OAuth + streamable-HTTP, no monkeypatch

2026-07-04 15:07:46 -04:00

credentials.py

feat(multi-tenant): resolve per-caller credentials in every tool

2026-07-04 19:28:27 -04:00

crypto.py

feat(multi-tenant): data layer, encryption, and per-request credential resolver

2026-07-04 19:07:10 -04:00

mcp_instance.py

mcp: default to stateful sessions + SSE (Claude Desktop needs Mcp-Session-Id)

2026-07-06 21:37:33 -04:00

py.typed

Fork intervals-mcp-server: native OAuth + streamable-HTTP, no monkeypatch

2026-07-04 15:07:46 -04:00

server_setup.py

mcp: CORS on the streamable-http app (answer OPTIONS preflight without auth)

2026-07-06 22:13:36 -04:00

server.py

Fork intervals-mcp-server: native OAuth + streamable-HTTP, no monkeypatch

2026-07-04 15:07:46 -04:00

store.py

feat(multi-tenant): data layer, encryption, and per-request credential resolver

2026-07-04 19:07:10 -04:00