Skip to content

v3.10.0 — OAuth for remote MCP servers

Choose a tag to compare

View all tags
@eniz1806 eniz1806 released this 06 Jun 17:01
v3.10.0
1b5d4e9

Completes Remote MCP + OAuth.

Added

  • OAuth 2.1 login for remote MCP servers. Two flows:
    • Interactive — opens your browser (authorization-code + PKCE), with server discovery and dynamic client registration: 
      /mcp add linear https://mcp.linear.app/mcp --oauth
    • Machine-to-machine (no browser): 
      /mcp add api https://example.com/mcp --oauth-client-id env:CID --oauth-client-secret env:CSEC
    • Optional --scope "read write".
  • Token caching + auto-refresh — cached under ~/.kodiqa/oauth/ (0600), reused across sessions, refreshed before expiry and transparently on a 401.

Tests

  • Full coverage of PKCE, discovery, dynamic registration, the callback server, token exchange/refresh, both grants, a deterministic interactive end-to-end (real callback server + fake browser), and 401 refresh-and-retry. 409 total; ruff + CI green.

Only the live browser login is user-verified; everything around it is tested.

Assets 2
Loading