Thomas Kosiewski 494dccc510 feat: implement MCP HTTP server endpoint with authentication (#18670) ...

# Add MCP HTTP server with streamable transport support

- Add MCP HTTP server with streamable transport support
- Integrate with existing toolsdk for Coder workspace operations
- Add comprehensive E2E tests with OAuth2 bearer token support
- Register MCP endpoint at /api/experimental/mcp/http with authentication
- Support RFC 6750 Bearer token authentication for MCP clients

Change-Id: Ib9024569ae452729908797c42155006aa04330af
Signed-off-by: Thomas Kosiewski <tk@coder.com>

2025-07-03 19:27:41 +02:00

..

agentapi

fix(coderd/agentapi): make sub agent slugs more unique (#18581)

2025-06-25 17:36:23 +01:00

agentmetrics

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

apidoc

feat: implement MCP HTTP server endpoint with authentication (#18670)

2025-07-03 19:27:41 +02:00

apikey

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

appearance

…

audit

feat: allow users to pause prebuilt workspace reconciliation (#18700)

2025-07-02 15:05:42 +00:00

autobuild

chore: increase fileCache hit rate in autobuilds lifecycle (#18507)

2025-06-24 07:36:39 -05:00

awsidentity

…

azureidentity

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

coderdtest

feat: support dynamic parameters on create template request (#18636)

2025-07-02 09:44:01 -05:00

cryptokeys

…

database

fix: remove unique constraint on OAuth2 provider app names (#18669)

2025-07-03 19:13:13 +02:00

devtunnel

chore: disable devtunnel tests on windows (#18521)

2025-06-24 19:01:29 +10:00

dynamicparameters

chore: create interface for pkgs to return codersdk errors (#18719)

2025-07-03 08:33:45 -05:00

entitlements

…

externalauth

chore: remove unnecessary redeclarations in for loops (part 2) (#18593)

2025-06-26 12:28:00 -06:00

files

chore: don't cache errors in file cache (#18555)

2025-07-01 13:50:37 -06:00

gitsshkey

…

healthcheck

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

httpapi

chore: create interface for pkgs to return codersdk errors (#18719)

2025-07-03 08:33:45 -05:00

httpmw

feat: implement RFC 6750 Bearer token authentication (#18644)

2025-07-02 19:14:54 +02:00

identityprovider

feat: oauth2 - add RFC 8707 resource indicators and audience validation (#18575)

2025-07-02 17:49:00 +02:00

idpsync

chore: remove unnecessary redeclarations in for loops (part 2) (#18593)

2025-06-26 12:28:00 -06:00

jobreaper

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

jwtutils

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

mcp

feat: implement MCP HTTP server endpoint with authentication (#18670)

2025-07-03 19:27:41 +02:00

metricscache

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

notifications

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

oauthpki

…

portsharing

…

prebuilds

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

prometheusmetrics

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

promoauth

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

provisionerdserver

feat: persist AI task state in template imports & workspace builds (#18449)

2025-06-24 10:36:37 +00:00

provisionerkey

…

proxyhealth

feat: add csp headers for embedded apps (#18374)

2025-06-17 09:00:32 -08:00

pubsub

…

rbac

chore: improve rbac and add benchmark tooling (#18584)

2025-06-27 12:05:34 +01:00

render

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

runtimeconfig

…

schedule

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

searchquery

chore(coderd/database): optimize AuditLogs queries (#18600)

2025-07-01 07:31:14 +02:00

telemetry

feat: graduate prebuilds to general availability (#18607)

2025-06-26 15:54:52 +02:00

testdata

feat: implement dynamic parameter validation (#18482)

2025-06-23 12:35:15 -05:00

tracing

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

updatecheck

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

userpassword

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

util

feat: implement dynamic parameter validation (#18482)

2025-06-23 12:35:15 -05:00

webpush

chore: remove unnecessary redeclarations in for loops (part 2) (#18593)

2025-06-26 12:28:00 -06:00

workspaceapps

fix!: stop workspace before update (#18425)

2025-06-23 09:12:37 +01:00

workspacestats

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

wsbuilder

chore: create interface for pkgs to return codersdk errors (#18719)

2025-07-03 08:33:45 -05:00

wspubsub

…

activitybump_test.go

…

aitasks_test.go

feat: add the /aitasks/prompts endpoint (#18464)

2025-06-24 13:06:02 +02:00

aitasks.go

feat: add the /aitasks/prompts endpoint (#18464)

2025-06-24 13:06:02 +02:00

apikey_test.go

feat: add separate max token lifetime for administrators (#18267)

2025-06-06 17:36:30 +02:00

apikey.go

feat: add separate max token lifetime for administrators (#18267)

2025-06-06 17:36:30 +02:00

apiroot.go

…

audit_internal_test.go

…

audit_test.go

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

audit.go

chore(coderd/database): optimize AuditLogs queries (#18600)

2025-07-01 07:31:14 +02:00

authorize_test.go

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

authorize.go

chore: ensure proper rbac permissions on 'Acquire' file in the cache (#18348)

2025-06-16 13:40:45 +00:00

client_test.go

…

coderd_internal_test.go

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

coderd_test.go

…

coderd.go

feat: implement MCP HTTP server endpoint with authentication (#18670)

2025-07-03 19:27:41 +02:00

csp.go

…

debug_test.go

…

debug.go

…

deployment_test.go

…

deployment.go

chore: remove chats experiment (#18535)

2025-06-25 13:03:32 +00:00

deprecated.go

…

experiments_test.go

…

experiments.go

fix: do not warn on valid known experiments (#18514)

2025-06-24 09:14:41 +01:00

externalauth_test.go

…

externalauth.go

…

files_test.go

…

files.go

…

gitsshkey_test.go

…

gitsshkey.go

…

inboxnotifications_internal_test.go

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

inboxnotifications_test.go

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

inboxnotifications.go

fix(coderd): fix panics by always checking for non-nil request logger (#18228)

2025-06-12 13:50:50 +03:00

insights_internal_test.go

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

insights_test.go

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

insights.go

…

latencycheck.go

…

mcp_http.go

feat: implement MCP HTTP server endpoint with authentication (#18670)

2025-07-03 19:27:41 +02:00

members_test.go

…

members.go

…

notifications_test.go

…

notifications.go

…

oauth2_error_compliance_test.go

feat: implement OAuth2 dynamic client registration (RFC 7591/7592) (#18645)

2025-07-03 18:33:47 +02:00

oauth2_metadata_test.go

feat: implement RFC 6750 Bearer token authentication (#18644)

2025-07-02 19:14:54 +02:00

oauth2_metadata_validation_test.go

feat: implement OAuth2 dynamic client registration (RFC 7591/7592) (#18645)

2025-07-03 18:33:47 +02:00

oauth2_security_test.go

feat: implement OAuth2 dynamic client registration (RFC 7591/7592) (#18645)

2025-07-03 18:33:47 +02:00

oauth2_test.go

fix: remove unique constraint on OAuth2 provider app names (#18669)

2025-07-03 19:13:13 +02:00

oauth2.go

feat: implement MCP HTTP server endpoint with authentication (#18670)

2025-07-03 19:27:41 +02:00

organizations_test.go

…

organizations.go

…

pagination_internal_test.go

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

pagination.go

…

parameters_test.go

chore: remove per request dynamic parameters opt in and rely on template (#18505)

2025-06-23 15:04:09 -05:00

parameters.go

chore: refactor dynamic parameters into dedicated package (#18420)

2025-06-20 13:00:39 -05:00

presets_test.go

feat: allow for default presets (#18445)

2025-06-24 12:19:19 +02:00

presets.go

feat: allow for default presets (#18445)

2025-06-24 12:19:19 +02:00

provisionerdaemons_test.go

…

provisionerdaemons.go

…

provisionerjobs_internal_test.go

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

provisionerjobs_test.go

…

provisionerjobs.go

fix(coderd): fix panics by always checking for non-nil request logger (#18228)

2025-06-12 13:50:50 +03:00

roles_test.go

…

roles.go

chore: ensure proper rbac permissions on 'Acquire' file in the cache (#18348)

2025-06-16 13:40:45 +00:00

tailnet_test.go

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

tailnet.go

…

templates_test.go

feat: support dynamic parameters on create template request (#18636)

2025-07-02 09:44:01 -05:00

templates.go

feat: support dynamic parameters on create template request (#18636)

2025-07-02 09:44:01 -05:00

templateversions_test.go

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

templateversions.go

feat: persist AI task state in template imports & workspace builds (#18449)

2025-06-24 10:36:37 +00:00

updatecheck_test.go

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

updatecheck.go

…

userauth_test.go

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

userauth.go

…

users_test.go

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

users.go

chore: ensure proper rbac permissions on 'Acquire' file in the cache (#18348)

2025-06-16 13:40:45 +00:00

webpush_test.go

…

webpush.go

…

workspaceagentportshare_test.go

…

workspaceagentportshare.go

docs: fix swagger documentation for DELETE port share endpoint (#18426)

2025-06-18 14:07:53 +00:00

workspaceagents_test.go

fix!: use devcontainer ID when rebuilding a devcontainer (#18604)

2025-06-26 11:41:57 +01:00

workspaceagents.go

fix!: use devcontainer ID when rebuilding a devcontainer (#18604)

2025-06-26 11:41:57 +01:00

workspaceagentsrpc_internal_test.go

…

workspaceagentsrpc_test.go

…

workspaceagentsrpc.go

feat(coderd/agentapi): implement sub agent api (#17823)

2025-05-29 12:15:47 +01:00

workspaceapps_test.go

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

workspaceapps.go

…

workspacebuilds_test.go

fix: complete job and mark workspace as deleted when no provisioners are available (#18465)

2025-06-23 14:07:42 +01:00

workspacebuilds.go

chore: reorder prebuilt workspace authorization logic (#18506)

2025-06-24 16:33:21 +01:00

workspaceproxies_test.go

…

workspaceproxies.go

…

workspaceresourceauth_test.go

…

workspaceresourceauth.go

…

workspaces_test.go

feat: persist AI task state in template imports & workspace builds (#18449)

2025-06-24 10:36:37 +00:00

workspaces.go

chore: improve dynamic parameter validation errors (#18501)

2025-06-23 15:08:18 -05:00

workspaceupdates_test.go

…

workspaceupdates.go

…