Repository navigation

Structured MCP call outcome for hosts, and OAuth/config_doc follow-ups to #39 #40

Closed

Assignees

Labels

opened

Summary

Let a host observe every MCP bridge call without wrapping the tool, plus small follow-ups to the host-backed OAuth flow (#39), so OpenCompany can drop its own call wrapper and OAuth port.

Scope

tinymcp-bus: McpCallOutcome / McpCallError + MCP_CALL_RESULT_KIND; McpCallTool sets it as ToolResult.metadata on success and on errors once server and tool are known.
OAuth: public OAuthBundle; OAuthFlow::refresh that re-applies the public-endpoint guard.
config_doc: parse_with (registered host fields, lenient mode) and render symmetry for allowed_tools, disallowed_tools, timeout_secs.
SecretScrubber::with_secrets for host-known secrets.

Acceptance

fmt / clippy / tests / 90% per-file coverage green; bus serde round-trips; OpenHuman and OpenCompany compile against the branch.

oxoxDev
self-assigned this
on Oct 6, 2026
tinysweeper
added
priority: p3
on Oct 6, 2026
tinysweeper commented on Oct 6, 2026
tinysweeperbot
on Oct 6, 2026

Feature request: expose structured MCP call outcomes (McpCallOutcome/McpCallError) so hosts can observe bridge calls without wrapping tools, plus follow-ups to the host-backed OAuth flow (OAuthBundle, OAuthFlow::refresh), config_doc parse_with and render symmetry, and SecretScrubber::with_secrets. Enhancement work with acceptance criteria tied to fmt/clippy/tests/coverage and downstream consumers compiling.

Labelled priority: p3.
tinysweeper
added the
Feature
issue type on Oct 6, 2026
oxoxDev
added 14 commits that reference this issue on Oct 6, 2026
test(config_doc): compare empty collections with assert_eq for clippy…
8fb9af9
fix(oauth): redact secrets from OAuthBundle Debug (tinyhumansai#40)
e62c5fa
fix(agent_tools): validate McpCallOutcome kind and ok/error pairing o…
9d5399f
fix(tools): strip only fence characters from bridge identifiers (tiny…
c1e3b14
fix(tools): report caller-named server and tool in call outcomes unsc…
586c4e2
fix(tools): redact host-injected secrets as strict credentials (tinyh…
28b5d17
fix(lib): keep McpAuthChallenge in the crate-root re-exports (tinyhum…
9b90a77
fix(oauth): drop a refresh superseded by a newer sign-in (tinyhumansa…
05a94ad
docs: qualify the call-outcome guarantee and document identifier hand…
edcb972
fix(tools): redact secrets from SecretScrubber Debug (tinyhumansai#40)
2719f88
fix(agent_tools): reject advertises_oauth without unauthorized on dec…
60db2d0
fix(oauth): send no refresh request without a refresh token (tinyhuma…
c9e542e
feat(oauth): let the host name the client it registers (tinyhumansai#40)
621ab2b
docs(readme): describe OAuthFlow::with_client_name (tinyhumansai#40)
8b92a99
oxoxDev
closed this as completedin #41 on Oct 6, 2026
oxoxDev
added 8 commits that reference this issue on Oct 6, 2026
feat(agent_tools): add McpCallOutcome and bump contract to 1.3 (#40)
9cdca55
feat(tools): attach McpCallOutcome metadata to mcp_call_tool (#40)
0858553
feat(tools): strip markdown fences from bridge identifiers (#40)
e6271d2
feat(tools): add SecretScrubber::with_secrets (#40)
a8d0833
feat(oauth): public OAuthBundle and guarded OAuthFlow::refresh (#40)
d3eabe6
feat(config_doc): parse_with host extension and render_declared (#40)
cf2e0fb
docs: describe the call outcome and the mcp.json host extension (#40)
bae14c4
Merge pull request #41 from oxoxDev/feat/40-call-outcome
ed44f2b

to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

oxoxDev

Labels

Type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests