feat(mcp): OAuth discovery (RFC 9728/8414) + dynamic client registration (RFC 7591) (closes #316)#320

Merged

initializ-mk merged 3 commits into

mainfrom

feat/mcp-oauth-discovery-dcr

Jul 16, 2026

Commits on Jul 16, 2026

feat(mcp): OAuth discovery (RFC 9728/8414) + dynamic client registration (RFC 7591) (closes #316)
initializ-mk
committed
fix(mcp): address #320 review — don't persist DCR secret, pin refresh fail-closed, multi-AS
initializ-mk
committed
fix(mcp): `mcp test` honors token_store_path like login/logout
initializ-mk
committed