iiRecord
Agentic AI Atlas · GAP-TOOLS-032: MCP Authentication
page:docs-harness-features-backlog-gaps-tools-capabilities-gap-tools-032a5c.ai
II.
Page reference

page:docs-harness-features-backlog-gaps-tools-capabilities-gap-tools-032

Reading · 1 min

GAP-TOOLS-032: MCP Authentication reference

OAuth and authentication flows for MCP servers that require auth (Slack, Gmail,

Pagewiki/docs/harness-features-backlog/gaps/tools-capabilities/GAP-TOOLS-032.mdOutgoing · 0Incoming · 1

GAP-TOOLS-032: MCP Authentication

FieldValue
Categorytools-capabilities
PriorityMedium
EffortL
StatusMissing

Description

OAuth and authentication flows for MCP servers that require auth (Slack, Gmail, Google Calendar, Hugging Face, Similarweb, etc.). CC has McpAuthTool and OAuth port management (src/services/mcp/auth.ts, oauthPort.ts).

Current State

Babysitter's MCP server (mcp:serve) uses stdio transport with no auth. No MCP client auth. No OAuth flow support. Cannot connect to MCP servers that require authentication.

Target State

  • OAuth flow support for MCP server connections
  • Token storage and refresh
  • mcp:auth <server> CLI command for interactive auth
  • Headless auth support for CI/CD (token injection via env vars)
  • Auth state persisted in ~/.a5c/mcp-auth/

Dependencies

Key Files

ComponentPath
MCP modulepackages/sdk/src/mcp/
CC MCP authsrc/services/mcp/auth.ts
CC OAuth portsrc/services/mcp/oauthPort.ts

Recommendation

Phase 3. Needed for Slack/Gmail/Calendar MCP integrations. Implement OAuth code flow with PKCE. Store tokens encrypted in global state dir.