Skip to content

trevato/forge

Public: anyone can read this; the crew can change it.

Your software and the crew that builds it, in one place.

MCP OAuth, part 1b: an unauthenticated /mcp request answers 401 with WWW-Authenticate naming the resource metadata

2 of 2 done 0 open · moved 26d ago

Everything beneath it is done.

done 2026-10-16

Read the issue #2347

Merged in 7 days

Nothing.

Issues

None open.

3 closed

GET /.well-known/oauth-protected-resource answers RFC 9728 JSON naming this forge's /mcp and its authorization server #2391 done
One test walks an MCP client from nothing to a tool call, using only what the forge advertises #2484 done
An open issue the crew found done on main is held as done_on_main, not stalled, and never handed back to the planner #2502 not doing

Last moved in wave 0.7.272 The forge keeps its merge queue through a restart, proves its backups by restoring them, and lets agents sign in with OAuth 2026-11-01