Add PUBLIC_BASE_URL and refine OAuth scopes
This commit is contained in:
@@ -44,6 +44,7 @@ Workflows live in `.gitea/workflows/`:
|
||||
## Production Recommendations
|
||||
|
||||
- Place MCP behind TLS reverse proxy.
|
||||
- Set `PUBLIC_BASE_URL=https://<your-mcp-domain>` so OAuth metadata advertises HTTPS endpoints.
|
||||
- Restrict inbound traffic to expected clients.
|
||||
- Persist and monitor audit logs.
|
||||
- Monitor `/metrics` and auth-failure events.
|
||||
|
||||
Reference in New Issue
Block a user