Skip to content

Add MCP OAuth client: probe, login, tools, status - #4

Merged
angelraph merged 1 commit into
masterfrom
feature/mcp-auth
Sep 21, 2026
Merged

angelraph merged 1 commit into
masterfrom
feature/mcp-auth

Conversation

@angelraph

Copy link
Copy Markdown
Owner

Adds the MCP client's authentication and discovery.

  • charter mcp probe: reads the server's public OAuth metadata (verified live).
  • charter mcp login / tools / status: OAuth with PKCE and a client ID metadata document, loopback callback with state check, tokens stored in a gitignored file.
  • docs/mcp-client.json: the client metadata document, which must be hosted at the configured HTTPS URL.
  • 13 new tests against a fake authorization server; 250 total.

Not done: running login against Binance's live consent page, and any order placement over MCP. The README says so.

Implements the sign-in the Binance Agent OS MCP server advertises: public client, PKCE S256, authorization code grant, client ID metadata document instead of dynamic registration. Loopback listener validates state. Tested against a fake authorization server; not yet run against Binance's live consent page. Order placement through MCP is not built.
@angelraph
angelraph merged commit 3f33917 into master Sep 21, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant