Skip to content

fix(mcp): restore /mcp path in publicMcp base URL#2249

Merged
jordan-umusu merged 2 commits intomainfrom
fix/mcp-oauth-base-url
Mar 4, 2026
Merged

fix(mcp): restore /mcp path in publicMcp base URL#2249
jordan-umusu merged 2 commits intomainfrom
fix/mcp-oauth-base-url

Conversation

@jordan-umusu
Copy link
Collaborator

@jordan-umusu jordan-umusu commented Mar 4, 2026

Summary by cubic

Restore the /mcp path in the public MCP base URL and fix ingress matching so OAuth discovery and protected-resource endpoints resolve under /mcp.

  • Bug Fixes
    • Helm: append /mcp to publicMcp when unset; set EKS publicMcp to https:///mcp.
    • Ingress: use Prefix for /.well-known/oauth-protected-resource to ensure subpath routing.

Written for commit 1214b7c. Summary will update on new commits.

@jordan-umusu jordan-umusu marked this pull request as ready for review March 4, 2026 15:38
@jordan-umusu jordan-umusu requested a review from topher-lo March 4, 2026 15:38
Copy link
Contributor

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

@topher-lo topher-lo added the fix Bug fix label Mar 4, 2026
Copy link
Contributor

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

2 issues found across 3 files (changes from recent commits).

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="deployments/helm/tracecat/templates/_helpers.tpl">

<violation number="1">
P1: Default `publicMcpUrl` drops the `/mcp` path, which can break MCP OAuth discovery and route resolution when `urls.publicMcp` is not explicitly set.</violation>
</file>

<file name="deployments/eks/modules/eks/helm.tf">

<violation number="1">
P1: publicMcp drops the /mcp suffix, so MCP endpoints will resolve under the root domain instead of /mcp. This reintroduces the broken OAuth discovery paths the PR is trying to fix. Keep /mcp in the public MCP base URL.</violation>
</file>

Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.

@jordan-umusu jordan-umusu merged commit 74846e9 into main Mar 4, 2026
9 checks passed
@jordan-umusu jordan-umusu deleted the fix/mcp-oauth-base-url branch March 4, 2026 21:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

fix Bug fix

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants