feat(mcp): add hosted httpSMS server - #990

Open

AchoArnold wants to merge 26 commits into

mainfrom

feat/mcp-server

Commits on Sep 3, 2026

docs(mcp): design hosted MCP server

AchoArnold
and
Copilot
committed
b00480c
docs(mcp): add implementation plan

AchoArnold
and
Copilot
committed
4c99540
feat(api): trust scoped MCP tokens

AchoArnold
and
Copilot
committed
8a5a4c8
feat(api): add incoming message endpoint

AchoArnold
and
Copilot
committed
97d9786
feat(mcp): add service foundation

AchoArnold
and
Copilot
committed
bf06243
fix(mcp): drop firebase SDK, make KeySet config one-shot

AchoArnold
and
Copilot
committed
043f66f
feat(mcp): add OAuth state and metadata

AchoArnold
and
Copilot
committed
2e17e75
fix(mcp): harden OAuth metadata fetching

AchoArnold
and
Copilot
committed
a748407
feat(mcp): add Firebase OAuth flow

AchoArnold
and
Copilot
committed
dfcf5e2
fix(mcp): harden OAuth authorization flow
AchoArnold
committed
e4ab70f
feat(mcp): add httpSMS API client

AchoArnold
and
Copilot
committed
505ecb2
fix(mcp): redact API query traces

AchoArnold
and
Copilot
committed
5e4d7fc
feat(mcp): add messaging tools

AchoArnold
and
Copilot
committed
86afa17
feat(mcp): add API key tools

AchoArnold
and
Copilot
committed
a13bc7d
fix(mcp): mark rotated keys sensitive

AchoArnold
and
Copilot
committed
70617c2
feat(mcp): assemble hosted server

AchoArnold
and
Copilot
committed
edec15f
fix(mcp): harden server assembly
AchoArnold
committed
1786941
fix(mcp): rate limit rotation prompts

AchoArnold
and
Copilot
committed
1740811

Commits on Sep 4, 2026

chore(mcp): add Cloud Run deployment
AchoArnold
committed
b980af0
fix(mcp): clarify deployment defaults
AchoArnold
committed
f69a96f
test(mcp): add full integration suite
AchoArnold
committed
b95789a
fix(tests): make MCP integration deterministic
AchoArnold
committed
3bb6025
fix(tests): validate rate limit success path

AchoArnold
and
Copilot
committed
ae19eb3
ci(mcp): gate deploys on MCP tests
AchoArnold
committed
318be45
Merge remote-tracking branch 'origin/main' into feat/mcp-server
AchoArnold
committed
a44f222
fix(auth): bound token metadata caches

AchoArnold
and
Copilot
committed
3a2391c