admin/accounted
3
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

fix(mcp): eager-auth flag on the Grok connector links so Grok starts OAuth (#2167)

Browse Source 
* fix(mcp): eager-auth flag on the Grok connector links so Grok starts OAuth

Live test after #2158: pasting the Grok URL into grok.com's custom
connector dialog listed all 150+ tools and never opened the sign-in. Grok
probes the URL without credentials, like claude.ai, and reads the lazy
200 on initialize as an authless server; only the 401 challenge starts
OAuth (#2159 fixed the same thing for the claude.ai link).

- lib/onboarding/checklist.ts: mcpServerUrl() builds the server URL with
  an optional eagerAuth flag; sideDoorServerUrl() gives the Grok side door
  auth=required and keeps ChatGPT lazy; claudeConnectorLink() reuses it.
  SIDE_DOORS / SideDoor move here from the component. Tests for all three.
- NewUserChecklist copies the door-specific URL (now with a client marker).
- ApiKeysPanel's Grok row copies the flagged URL, mirroring the Claude one.
- auth-mode.ts comment records the second consumer; registry entry's Grok
  step carries the flag; DECISIONS.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LhTJcwgzmN3TsLR8tVHwdi
Signed-off-by: Emil <emilmattsson14@gmail.com>

* docs(mcp): registry Claude.ai step carries auth=required too

Review pass on #2167: the registry entry flagged the Grok install URL
but left the Claude.ai step on the bare URL, which pre-fills "None" in
claude.ai's dialog (#2159). Same file, same flag, now consistent.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LhTJcwgzmN3TsLR8tVHwdi
Signed-off-by: Emil <emilmattsson14@gmail.com>

---------

Signed-off-by: Emil <emilmattsson14@gmail.com>
Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
This commit is contained in:
Mattsson
2026-09-02 16:55:23 +02:00
committed by GitHub
co-authored by Claude Fable 5.1
parent f1230282a9
commit a80ce54b78
7 changed files with 96 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files
extensions/general/mcp-server/auth-mode.ts
+6 -3
View File
@@ -7,8 +7,8 @@
* turns into its Connect prompt.
*
* `auth=required` on the endpoint URL makes that URL eager instead: EVERY
* tokenless request answers the 401 challenge, `initialize` included. It has
* one consumer. claude.ai's two-step "Add custom connector" dialog probes the
* tokenless request answers the 401 challenge, `initialize` included. Two
* consumers. claude.ai's two-step "Add custom connector" dialog probes the
* URL without credentials and pre-fills the Authentication choice from the
* answer (Anthropic: "Claude checks the URL and pre-fills the authentication
* settings it detects"). A 200 on that probe is read as "None", an authless
@@ -16,7 +16,10 @@
* when the challenge arrives later. A 401 is the only answer the dialog reads
* as OAuth (Anthropic: "Claude does not honor a WWW-Authenticate header on a
* 200 response"), so the links we control (Settings -> API & MCP, the
* onboarding checklist, both docs pages, the website) carry the flag.
* onboarding checklist, both docs pages, the website) carry the flag. Grok's
* custom-connector dialog behaves the same way: on the lazy URL it lists
* every tool and never starts OAuth (observed 2026-09-02), so the Grok links
* carry the flag too.
*
* The bare URL keeps lazy authentication for Claude Code, the plugin, Cursor,
* ChatGPT developer mode and hand-typed adds, and connector records created