{
  "id": "page:docs-harness-features-backlog-gaps-tools-capabilities-gap-tools-032",
  "_kind": "Page",
  "_file": "wiki/docs/harness-features-backlog/gaps/tools-capabilities/gap-tools-032.md",
  "_cluster": "wiki",
  "attributes": {
    "nodeKind": "Page",
    "sourcePath": "docs/harness-features-backlog/gaps/tools-capabilities/GAP-TOOLS-032.md",
    "sourceKind": "repo-docs",
    "title": "GAP-TOOLS-032: MCP Authentication",
    "displayName": "GAP-TOOLS-032: MCP Authentication",
    "slug": "docs/harness-features-backlog/gaps/tools-capabilities/gap-tools-032",
    "articlePath": "wiki/docs/harness-features-backlog/gaps/tools-capabilities/GAP-TOOLS-032.md",
    "article": "\n# GAP-TOOLS-032: MCP Authentication\n\n| Field | Value |\n|-------|-------|\n| Category | tools-capabilities |\n| Priority | Medium |\n| Effort | L |\n| Status | Missing |\n\n## Description\nOAuth and authentication flows for MCP servers that require auth (Slack, Gmail,\nGoogle Calendar, Hugging Face, Similarweb, etc.). CC has `McpAuthTool` and\nOAuth port management (`src/services/mcp/auth.ts`, `oauthPort.ts`).\n\n## Current State\nBabysitter's MCP server (`mcp:serve`) uses stdio transport with no auth.\nNo MCP client auth. No OAuth flow support. Cannot connect to MCP servers\nthat require authentication.\n\n## Target State\n- OAuth flow support for MCP server connections\n- Token storage and refresh\n- `mcp:auth <server>` CLI command for interactive auth\n- Headless auth support for CI/CD (token injection via env vars)\n- Auth state persisted in `~/.a5c/mcp-auth/`\n\n## Dependencies\n- [GAP-TOOLS-025](GAP-TOOLS-025.md) -- MCP client capability\n- [GAP-MCPC-004](../mcp-channels/GAP-MCPC-004.md) -- MCP server management\n\n## Key Files\n| Component | Path |\n|-----------|------|\n| MCP module | `packages/sdk/src/mcp/` |\n| CC MCP auth | `src/services/mcp/auth.ts` |\n| CC OAuth port | `src/services/mcp/oauthPort.ts` |\n\n## Recommendation\nPhase 3. Needed for Slack/Gmail/Calendar MCP integrations. Implement OAuth\ncode flow with PKCE. Store tokens encrypted in global state dir.\n",
    "documents": []
  },
  "outgoingEdges": [],
  "incomingEdges": [
    {
      "from": "page:docs-harness-features-backlog",
      "to": "page:docs-harness-features-backlog-gaps-tools-capabilities-gap-tools-032",
      "kind": "contains_page"
    }
  ]
}