Add PUBLIC_BASE_URL and refine OAuth scopes
This commit is contained in:
Latte committed
1 parent
59e1ea53a8
commit
c79cc1ab9e
9 files changed
+541
-11
No files matched your search
@@ -44,6 +44,7 @@ Workflows live in `.gitea/workflows/`:
|
||||
## Production Recommendations
|
||||
|
||||
- Place MCP behind TLS reverse proxy.
|
||||
- Set `PUBLIC_BASE_URL=https://<your-mcp-domain>` so OAuth metadata advertises HTTPS endpoints.
|
||||
- Restrict inbound traffic to expected clients.
|
||||
- Persist and monitor audit logs.
|
||||
- Monitor `/metrics` and auth-failure events.
|
||||
|
||||
Reference in new issue
Block a user