kolaente 21d7c79d5a feat(mcp): register mcp:access api token scope ...

Adds the mcp scope group with a single access permission so it shows up
in GET /api/v1/routes (and therefore in the frontend token form).
Adds APIToken.HasMCPAccess() mirroring the caldav/feeds helpers.

The MCP endpoint will use POST, GET, and DELETE on the same path for the
streamable-HTTP transport, which CanDoAPIRoute's exact (method, path)
match cannot gate. The token middleware therefore skips the route check
for /api/v1/mcp and any sub-path; the actual authorization is delegated
to an inline HasMCPAccess() call in the MCP handler (added in the next
task).

Fixtures gain two MCP tokens for user 1: one mcp-only and one with
mcp:access plus projects read scopes for the per-tool scope filter tests.

2026-08-28 23:53:24 +02:00

..

fixtures

feat(mcp): register mcp:access api token scope

2026-08-28 23:53:24 +02:00

db_path_test.go

…

db_test.go

fix(postgres): resolve all statements against the configured schema (#3156)

2026-07-11 18:02:57 +02:00

db.go

feat: expose database connection pool stats as prometheus metrics

2026-08-16 17:57:52 +02:00

dump_test.go

fix(dump): parse dumped time strings so restore works on MySQL and MariaDB

2026-07-30 21:15:19 +02:00

dump.go

fix(dump): parse dumped time strings so restore works on MySQL and MariaDB

2026-07-30 21:15:19 +02:00

helpers_test.go

…

helpers.go

…

test_fixtures.go

…

test.go

…