Hiddenden/AegisGitea-MCP
5
0 Fork 0
Code Issues 2 Pull Requests Actions Packages Projects 1 Releases 1 Wiki Activity
110 Commits 2 Branches 1 Tag
9e508591333c9e0dd4e3b8beb748d8e626107597
Commit Graph
7 Commits
Author SHA1 Message Date
Latte 041b3ea7ff feat: generate the tool catalog from the pinned swagger 
Adds scripts/generate_catalog.py (with --check), the naming rules, schema conversion, the committed tools.json for all 537 operations and the load_catalog() loader.
 2026-10-14 15:51:01 +02:00
Latte b82e2866cb feat: new settings, CLI skeleton and interface skeletons 
Adds the pydantic-settings Settings with validated GITEA_URL, OAuth scopes
and toolsets, the argparse CLI skeleton, catalog.model, identity and
GiteaAPIError. Test fixtures now isolate env, cwd and state paths in tmp.
 2026-10-14 15:40:37 +02:00
Latte 4ac9626eb5 refactor!: remove legacy adapters, policy engine and API-key auth 
Removes the FastAPI server, hand-rolled MCP protocol, tool registry and
tools, YAML policy, resource-type authz, API-key and OAuth proxy modules,
automation, observability, cache, the old Gitea client and stdio adapter,
the key-management scripts and their tests (ADR 0006).
 2026-10-14 15:40:37 +02:00
Latte b275f5c0c2 docs: retarget setup to Claude connectors
lint / lint (push) Has been cancelled
Details
test / test (push) Has been cancelled
Details
docker / lint (pull_request) Successful in 2m3s
Details
docker / test (pull_request) Successful in 13s
Details
lint / lint (pull_request) Successful in 16s
Details
test / test (pull_request) Successful in 14s
Details
docker / docker-test (pull_request) Successful in 42s
Details
docker / docker-publish (pull_request) Has been skipped
Details
2026-06-13 21:05:21 +02:00
Latte 5969892af3 feat: harden gateway with policy engine, secure tools, and governance docs 2026-02-14 16:06:43 +01:00
Latte d82fe87113 update 2026-02-11 18:16:00 +01:00
Latte eeaad748a6 feat: add API key authentication system for ChatGPT Business 
Implements comprehensive Bearer token authentication to ensure only
authorized ChatGPT workspaces can access the MCP server.

Core Features:
- API key validation with constant-time comparison
- Multi-key support for rotation grace periods
- Rate limiting (5 failures per IP per 5 min)
- Comprehensive audit logging of all auth attempts
- IP-based failed attempt tracking

Key Management:
- generate_api_key.py: Create secure 64-char keys
- rotate_api_key.py: Guided key rotation with backup
- check_key_age.py: Automated expiration monitoring

Infrastructure:
- Traefik labels for HTTPS and rate limiting
- Security headers (HSTS, CSP, X-Frame-Options)
- Environment-based configuration
- Docker secrets support

Documentation:
- AUTH_SETUP.md: Complete authentication setup guide
- CHATGPT_SETUP.md: ChatGPT Business integration guide
- KEY_ROTATION.md: Key rotation procedures and automation

Security:
- Read-only operations enforced
- No write access to Gitea possible
- All auth attempts logged with correlation IDs
- Failed attempts trigger IP rate limits
- Keys never logged in full (only hints)

Breaking Changes:
- AUTH_ENABLED defaults to true
- MCP_API_KEYS environment variable now required
- Minimum key length: 32 characters (64 recommended)

Migration:
1. Generate API key: make generate-key
2. Add to .env: MCP_API_KEYS=<generated-key>
3. Restart: docker-compose restart aegis-mcp
4. Configure ChatGPT with Authorization header

Closes requirements for ChatGPT Business exclusive access.
 2026-01-29 20:05:49 +01:00