Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/upstream-projects.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@
projects:
- id: toolhive-registry-server
repo: stacklok/toolhive-registry-server
version: v1.4.3
version: v1.4.4
docs_paths:
- docs/toolhive/guides-registry
- docs/toolhive/concepts/registry-criteria.mdx
Expand Down
19 changes: 7 additions & 12 deletions docs/toolhive/guides-registry/authentication.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -64,14 +64,13 @@ auth:

### OAuth configuration fields

| Field | Type | Required | Default | Description |
| ----------------- | -------- | -------- | ----------------------------------------- | -------------------------------------------------- |
| `mode` | string | Yes | `oauth` | Authentication mode (`oauth` or `anonymous`) |
| `resourceUrl` | string | Yes | - | The URL of the registry resource being protected |
| `realm` | string | No | `mcp-registry` | OAuth realm identifier |
| `scopesSupported` | []string | No | `[mcp-registry:read, mcp-registry:write]` | OAuth scopes advertised in the discovery endpoint |
| `publicPaths` | []string | No | `[]` | Additional paths accessible without authentication |
| `providers` | array | Yes | - | List of OAuth/OIDC identity providers |
| Field | Type | Required | Default | Description |
| ------------- | -------- | -------- | -------------- | -------------------------------------------------- |
| `mode` | string | Yes | `oauth` | Authentication mode (`oauth` or `anonymous`) |
| `resourceUrl` | string | Yes | - | The URL of the registry resource being protected |
| `realm` | string | No | `mcp-registry` | OAuth realm identifier |
| `publicPaths` | []string | No | `[]` | Additional paths accessible without authentication |
| `providers` | array | Yes | - | List of OAuth/OIDC identity providers |

### Provider configuration fields

Expand All @@ -96,9 +95,6 @@ auth:
oauth:
resourceUrl: https://registry.example.com
realm: mcp-registry
scopesSupported:
- mcp-registry:read
- mcp-registry:write
publicPaths:
- /custom-health
- /metrics
Expand Down Expand Up @@ -400,7 +396,6 @@ GET /.well-known/oauth-protected-resource
"https://keycloak.example.com/realms/production",
"https://keycloak.example.com/realms/staging"
],
"scopes_supported": ["mcp-registry:read", "mcp-registry:write"],
"bearer_methods_supported": ["header"],
"resource_documentation": "https://docs.example.com/registry"
}
Expand Down
11 changes: 5 additions & 6 deletions docs/toolhive/guides-registry/deploy-operator.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -465,12 +465,11 @@ spec:

### OAuth configuration fields

| Field | Required | Default | Description |
| ----------------- | -------- | ----------------------------------------- | -------------------------------------------------- |
| `mode` | No | `oauth` | Authentication mode (`oauth` or `anonymous`) |
| `resourceUrl` | No | - | URL identifying this protected resource (RFC 9728) |
| `realm` | No | `mcp-registry` | Protection space identifier for WWW-Authenticate |
| `scopesSupported` | No | `[mcp-registry:read, mcp-registry:write]` | OAuth scopes supported by this resource |
| Field | Required | Default | Description |
| ------------- | -------- | -------------- | -------------------------------------------------- |
| `mode` | No | `oauth` | Authentication mode (`oauth` or `anonymous`) |
| `resourceUrl` | No | - | URL identifying this protected resource (RFC 9728) |
| `realm` | No | `mcp-registry` | Protection space identifier for WWW-Authenticate |

### Provider configuration fields

Expand Down