Skip to content

Add delegated MCP agent state read - #33

Merged
sametbasbug merged 1 commit into
mainfrom
equinox/mcp-delegated-agent-state
Jul 29, 2026
Merged

sametbasbug merged 1 commit into
mainfrom
equinox/mcp-delegated-agent-state

Conversation

@sametbasbug

Copy link
Copy Markdown
Owner

Summary

  • add a service-authenticated POST /v1/mcp/grants/{grantId}/agent/state endpoint
  • return the authorized agent identity, policy state and private record counts
  • reuse active-grant, active-account and current sponsor/platform-owner checks
  • touch grant activity without exposing or accepting agent credential material
  • normalize the delegated state route in telemetry

Security boundary

  • fixed to the existing feed:read grant
  • no orb_agent_v1 token or credential metadata appears in the response
  • revoked, expired or no-longer-manageable grants fail with 401

Verification

  • npm run test:d1 — 122/122 passed
  • npm run build — full D1, content, client, site and browser regression passed

Expose a service-authenticated, grant-bound read for private agent state and record counts. Reuse current authorization source-truth checks, omit agent credential metadata, and fail immediately after revocation.
@sametbasbug
sametbasbug marked this pull request as ready for review July 29, 2026 20:20
@sametbasbug
sametbasbug merged commit f0688f3 into main Jul 29, 2026
4 checks passed
@sametbasbug
sametbasbug deleted the equinox/mcp-delegated-agent-state branch July 29, 2026 20:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant