boost-backend — Kagenti tool lifecycle routes, MCP server registration, and infrastructure admin (issue 5 of 15)

[gabemontero]

Labels: ready-to-code
Depends on: Issue 2

Implement Kagenti tool lifecycle routes (boost.tool.* permissions), MCP server registration routes, and Kagenti infrastructure admin routes (boost.kagenti.admin).

Note: The boost-tool resource type and lifecycle permissions apply to Kagenti tools (K8s workloads) only. MCP servers are registered endpoints without lifecycle governance. MCP tools are runtime-discovered children of MCP servers — they are not independently managed.

Tasks

From openspec/changes/security-safety-governance/tasks.md sections 4 and 5:

• 4.1-4.4 Implement Kagenti tool lifecycle routes with boost.tool.* permissions
• 5.1 Implement Kagenti admin routes with boost.kagenti.admin

MCP server registration (admin panel CRUD, connection test, auth chain config) — see spec below

Specifications

• openspec/changes/security-safety-governance/specs/fine-grained-permissions/spec.md — Kagenti tool permission scenarios, infrastructure permissions
• openspec/changes/agent-creation-discovery/specs/mcp-tools/spec.md — MCP server registration and auth chain (separate from Kagenti tool lifecycle)

[fullsend-ai-triage]

Triage Summary

This issue is blocked by #3298 (boost-backend — Core plugin scaffold, ProviderManager, and security middleware, issue 2 of 15).

Why it's blocked

This issue (issue 5 of 15) implements Kagenti tool lifecycle routes (boost.tool.* permissions), MCP server registration routes, and Kagenti infrastructure admin routes (boost.kagenti.admin). These all depend on the core plugin scaffold, ProviderManager, and security middleware being established first in #3298.

Until #3298 lands, there is no plugin scaffold or security middleware to build these routes on top of.

What this issue covers (once unblocked)

• Tasks 4.1–4.4: Kagenti tool lifecycle routes with boost.tool.* permissions
• Task 5.1: Kagenti admin routes with boost.kagenti.admin
• MCP server registration: Admin panel CRUD, connection test, auth chain config

This issue will be re-evaluated once the blocking dependency is resolved.

---

Labels: This is a feature enhancement for the ai-integrations workspace area, covering MCP server registration and Kagenti tool management.