Mathias Bergqvist 9d08352324 feat(auth): fall back to GITEA_MCP_DEFAULT_TOKEN when no Bearer header ...

claude.ai connectors call the server with no Authorization header (confirmed
via request logging). Add a configurable default Gitea PAT so unauthenticated
clients (like claude.ai) can still reach the server.

Claude Code continues to pass per-request PATs; defaultToken="" preserves
the existing strict behaviour when the env var is unset.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-09 22:22:04 +02:00

..

allowlist

feat(allowlist): owner allowlist enforcement

2026-05-04 21:26:50 +02:00

auth

feat(auth): fall back to GITEA_MCP_DEFAULT_TOKEN when no Bearer header

2026-05-09 22:22:04 +02:00

config

feat(auth): fall back to GITEA_MCP_DEFAULT_TOKEN when no Bearer header

2026-05-09 22:22:04 +02:00

gitea

feat: replace static API token with per-request Gitea PAT pass-through

2026-05-07 21:04:47 +02:00

identity

feat(identity): created-content footer

2026-05-04 21:05:42 +02:00

mcp

fix(mcp): downgrade protocolVersion to 2025-03-26

2026-05-09 07:53:18 +02:00

registry

fix(mcp): map tool-not-found to CodeNotFound via registry sentinel

2026-05-04 20:59:15 +02:00

tools

feat(tools): repo_status

2026-05-06 22:59:51 +02:00