Add authenticated MCP Events webhook support - #17

Open

quinnj wants to merge 22 commits into

mainfrom

feat/mcp-events

Commits on Sep 30, 2026

Add authenticated MCP Events webhook support
quinnj
committed
6087400
Close webhook connections after each delivery

quinnj
and
claude
committed
7bec359
Keep event locks off network calls and scope verification per principal

quinnj
and
claude
committed
6752421
Validate every delivery first and deliver owners concurrently

quinnj
and
claude
committed
2d21e53
Follow the draft's TTL and replay rules on subscribe

quinnj
and
claude
committed
9c45546
Flush the subscription file to disk before replacing it

quinnj
and
claude
committed
c89acc6
Update the events guide for verification, delivery, and TTL changes

quinnj
and
claude
committed
9bdb204
Check the subscription store directory at construction

quinnj
and
claude
committed
ccf9433
Keep events out of the 2025-11-25 discovery manifest

quinnj
and
claude
committed
d7fdc2e
Stop stale retries and stale revocations from touching new subscriptions

quinnj
and
claude
committed
38bbaad
Apply the verification cooldown however the host is spelled

quinnj
and
claude
committed
0fc653c
Never send the server's netrc credentials to a callback

quinnj
and
claude
committed
521eee8
Keep sub-millisecond request deadlines bounded

quinnj
and
claude
committed
359321d
Let unsubscribe wait only for the subscription it removed

quinnj
and
claude
committed
7d1e7bd
Clamp non-positive TTL suggestions instead of rejecting them

quinnj
and
claude
committed
9c25ecd
Treat less than a millisecond of delivery time as expired

quinnj
and
claude
committed
aa5b28b
Verify one callback per principal at a time until the save

quinnj
and
claude
committed
6da9b94
Sync the store directory after replacing the subscription file

quinnj
and
claude
committed
bbd323d
Stop the HTTPS test from leaking a dead proxy on Windows

quinnj
and
claude
committed
c545e9a
Recheck access after a subscribe waits for its principal's turn

quinnj
and
claude
committed
b7b9111
Recheck access before every subscription save

quinnj
and
claude
committed
dbe330a
Detect refreshes with a per-save revision

quinnj
and
claude
committed
61134e4

Navigation Menu

Add authenticated MCP Events webhook support - #17

Add authenticated MCP Events webhook support#17
quinnj wants to merge 22 commits into
mainfrom
feat/mcp-events

Commits on Sep 30, 2026

Add authenticated MCP Events webhook support

Close webhook connections after each delivery

Keep event locks off network calls and scope verification per principal

Validate every delivery first and deliver owners concurrently

Follow the draft's TTL and replay rules on subscribe

Flush the subscription file to disk before replacing it

Update the events guide for verification, delivery, and TTL changes

Check the subscription store directory at construction

Keep events out of the 2025-11-25 discovery manifest

Stop stale retries and stale revocations from touching new subscriptions

Apply the verification cooldown however the host is spelled

Never send the server's netrc credentials to a callback

Keep sub-millisecond request deadlines bounded

Let unsubscribe wait only for the subscription it removed

Clamp non-positive TTL suggestions instead of rejecting them

Treat less than a millisecond of delivery time as expired

Verify one callback per principal at a time until the save

Sync the store directory after replacing the subscription file

Stop the HTTPS test from leaking a dead proxy on Windows

Recheck access after a subscribe waits for its principal's turn

Recheck access before every subscription save

Detect refreshes with a per-save revision