-
Notifications
You must be signed in to change notification settings - Fork 230
Description
When configuring an MCP in Every Code, these settings work in default Codex but are broken or ignored in Every Code.
Problem 1: http_headers.Authorization
This works in Codex but is broken in Every Code:
[mcp_servers.github]
url = "https://api.githubcopilot.com/mcp/"
http_headers = { Authorization = "Bearer TOKEN" }In Every Code, this appears to end up as:
Authorization: Bearer Bearer TOKENAs a workaround, the header currently needs to be configured like this:
[mcp_servers.github]
url = "https://api.githubcopilot.com/mcp/"
http_headers = { Authorization = "TOKEN" }which then produces the expected:
Authorization: Bearer TOKENThis differs from default Codex, where:
http_headers = { Authorization = "Bearer TOKEN" }works as expected.
Expected behavior
If http_headers.Authorization is explicitly set to Bearer TOKEN, it should be sent unchanged.
Actual behavior
Every Code appears to treat http_headers.Authorization as a raw bearer token value and prefixes Bearer again.
Note
This may also explain why bearer_token is broken in Every Code as well, since it likely goes through the same or a very similar auth-header path.
Problem 2: enabled_tools
This also appears to be ignored:
[mcp_servers.github]
url = "https://api.githubcopilot.com/mcp/"
enabled_tools = ["search_code"]In Every Code, the full tool set still appears to be exposed.
In default Codex, enabled_tools / disabled_tools are implemented and used to filter the registered MCP tools.
Expected behavior
enabled_tools should restrict the MCP server to exactly the listed tools.
Actual behavior
Every Code appears to silently ignore enabled_tools.