You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
docs: Add server-to-server token handling and feedback link
- Document S2S token filtering (hiding user tools like get_me)
- Add S2S row to authentication comparison table
- Link to discussion #1802 for feedback
Copy file name to clipboardExpand all lines: docs/changelog/2026-01-intelligent-scope-features.md
+15Lines changed: 15 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -34,6 +34,16 @@ For users running the local server with a classic Personal Access Token (`ghp_`
34
34
35
35
**Example:** If your PAT only has `repo` and `gist` scopes, tools requiring `admin:org`, `project`, or `notifications` will be hidden from your tool list.
When using server-to-server tokens (like the `GITHUB_TOKEN` in GitHub Actions), the remote server now intelligently hides user-context tools that don't make sense without a human user.
40
+
41
+
**Tools hidden for S2S tokens:**
42
+
-`get_me` — No user to query
43
+
- Other user-specific context tools
44
+
45
+
This ensures automated workflows see only the tools they can actually use, rather than failing when they attempt to call user-context APIs.
46
+
37
47
### Documented OAuth Scopes
38
48
39
49
Every MCP tool now includes explicit OAuth scope documentation:
@@ -100,6 +110,7 @@ If a tool requires `read:org` and your token has `admin:org`, the tool is availa
0 commit comments