29 Connected Apps

29 Connected Apps

Source: docs/design/29-connected-apps.md

Status: not implemented (D73 / D74)

One Connected App = one MCP server + one user account grant. Prefer vendor remote MCP + OAuth (MCP Authorization: PKCE, CIMD/DCR/pre-reg); system browser + loopback. Tokens only in local secrets — never to LLM / UI / external agents / KepCup servers.

Model

Connector → Connection → Grant (runtime.app_connection_ids). Tools named app_{slug}_{tool}. Risk tiers reuse MCP policy; optional “always allow for this Bot”. Tool definitions hashed on first connect (anti rug-pull). Missing/expired auth → {kind:'connect-app'} card then runs.retry.

Open platform base (D74)

Do not invent protocols: MCP, MCP Apps, Agent Skills, Registry server.json, MCPB. KepCup adds _meta["app.kepcup/connector"]. Directory as MCP Registry sub-registry with Ed25519-signed index. Cloudflare for CIMD / registry / optional hosted auth gateway.

Extension Center (§16)

Skills / Connections / MCP groups; custom MCP under Extension Center; Settings → Apps manages connected accounts. Local connectors have hard security boundaries (see source §17).