feat(dashboard): UI for managing MCP tokens #94

Merged

sharang merged 1 commits from feat/m7.3-mcp-tokens-ui into main 2026-06-30 16:32:56 +00:00

Conversation 0 Commits 1 Files Changed 5

+366

sharang commented 2026-06-18 10:54:18 +00:00

Owner

Copy Link

Copy Source

Summary

Adds a /mcp-tokens page so a logged-in user can mint, list, and revoke bearer tokens for the MCP server without curl. Stacks on #92 (which added the agent endpoints + MCP middleware) — once both land, a user can copy a token from the dashboard straight into their LLM client config.

Targets feat/m7.3-mcp-tenant-tokens (#92's branch) so the diff shown is only the UI changes. When #92 merges, this PR auto-retargets to main.

UX

• Create: "Create Token" button → inline form with name input. On submit, the server function calls POST /api/v1/mcp-tokens. The raw token is shown once in a yellow banner with a copy button and a "won't be shown again" warning. User dismisses manually.
• List: cards with name, prefix (mcpt_xxxx…), created date, last_used (or "never"). Revoked tokens render dimmed with a "revoked" pill.
• Revoke: trash button → confirm modal → soft delete.
• Toast feedback throughout.

Files

File	What
infrastructure/mcp_tokens.rs (new)	Three #[server] fns going through agent_client (auto-attaches the KC bearer + handles token refresh)
pages/mcp_tokens.rs (new)	The page component
app.rs	Adds Route::McpTokensPage at /mcp-tokens
pages/mod.rs, infrastructure/mod.rs	Module + re-export wiring

Test plan

• cargo fmt --all -- --check clean
• cargo clippy -p compliance-dashboard --features server -- -D warnings clean
• cargo clippy -p compliance-dashboard --features web --no-default-features -- -D warnings clean
• cargo check on both feature sets clean
• Manual after deploy: log in, hit /mcp-tokens, create a token, copy it, paste into a fresh curl against comp-mcp-dev.meghsakha.com/mcp, confirm tools/list works. Revoke; confirm a subsequent call 401s.

Followups

• No sidebar entry — matches mcp_servers (settings-style pages reached via direct URL). Worth a future Settings sub-menu pass.
• When the agent adds token expiry + per-tool scope, the create modal grows extra fields.

🤖 Generated with Claude Code

## Summary Adds a `/mcp-tokens` page so a logged-in user can mint, list, and revoke bearer tokens for the MCP server without curl. Stacks on **#92** (which added the agent endpoints + MCP middleware) — once both land, a user can copy a token from the dashboard straight into their LLM client config. **Targets `feat/m7.3-mcp-tenant-tokens` (#92's branch)** so the diff shown is only the UI changes. When #92 merges, this PR auto-retargets to main. ## UX - **Create**: "Create Token" button → inline form with name input. On submit, the server function calls `POST /api/v1/mcp-tokens`. The raw token is shown **once** in a yellow banner with a copy button and a "won't be shown again" warning. User dismisses manually. - **List**: cards with name, prefix (`mcpt_xxxx…`), created date, last_used (or "never"). Revoked tokens render dimmed with a "revoked" pill. - **Revoke**: trash button → confirm modal → soft delete. - Toast feedback throughout. ## Files | File | What | |---|---| | `infrastructure/mcp_tokens.rs` (new) | Three `#[server]` fns going through `agent_client` (auto-attaches the KC bearer + handles token refresh) | | `pages/mcp_tokens.rs` (new) | The page component | | `app.rs` | Adds `Route::McpTokensPage` at `/mcp-tokens` | | `pages/mod.rs`, `infrastructure/mod.rs` | Module + re-export wiring | ## Test plan - [x] `cargo fmt --all -- --check` clean - [x] `cargo clippy -p compliance-dashboard --features server -- -D warnings` clean - [x] `cargo clippy -p compliance-dashboard --features web --no-default-features -- -D warnings` clean - [x] `cargo check` on both feature sets clean - [ ] Manual after deploy: log in, hit `/mcp-tokens`, create a token, copy it, paste into a fresh curl against `comp-mcp-dev.meghsakha.com/mcp`, confirm tools/list works. Revoke; confirm a subsequent call 401s. ## Followups - No sidebar entry — matches `mcp_servers` (settings-style pages reached via direct URL). Worth a future Settings sub-menu pass. - When the agent adds token expiry + per-tool scope, the create modal grows extra fields. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

sharang changed target branch from feat/m7.3-mcp-tenant-tokens to main 2026-06-30 15:27:38 +00:00

sharang force-pushed feat/m7.3-mcp-tokens-ui from b3a8a97729 to eb88656c43 2026-06-30 15:27:48 +00:00 Compare

sharang referenced this issue from a commit 2026-06-30 15:48:51 +00:00

fix(audit): bump quinn-proto + ignore rmcp DNS-rebinding advisory

sharang referenced this pull request 2026-06-30 15:49:02 +00:00

fix(audit): bump quinn-proto + ignore rmcp DNS-rebinding advisory #97

sharang added 1 commit 2026-06-30 16:07:21 +00:00

feat(dashboard): UI for managing MCP tokens ... 7e07ebeb53

Adds /mcp-tokens page that lets a logged-in user mint, list, and
revoke bearer tokens for the MCP server. Stacks on #92 (which added
the agent endpoints + middleware) — once both land, the loop is
closed: a user can copy a token from the dashboard straight into
their Claude Desktop / Cursor / ChatGPT MCP config.

UX
- "Create Token" button → inline form with name input.
- On submit, server function calls `POST /api/v1/mcp-tokens`. The
  raw token is shown ONCE in a prominent yellow banner with a copy
  button and a "won't be shown again" warning, then the user
  dismisses it manually.
- List view: card per token with name, prefix `mcpt_xxxx…`, created
  date, last_used (or "never"). Revoked tokens render dimmed with a
  "revoked" pill. Active tokens have a trash button → confirm
  modal → soft delete.
- Toast feedback on create/revoke success/failure.

Files
- infrastructure/mcp_tokens.rs (new) — three #[server] functions:
  fetch_mcp_tokens, create_mcp_token, revoke_mcp_token. All go
  through agent_client so the Keycloak Bearer is auto-attached;
  the agent then enforces tenant scoping on every endpoint.
- pages/mcp_tokens.rs (new) — the page component itself.
- app.rs — adds Route::McpTokensPage at /mcp-tokens.
- pages/mod.rs, infrastructure/mod.rs — module + re-export wiring.

Timestamp format
- The agent serializes BSON DateTime as extended JSON
  `{"$date":{"$numberLong":"..."}}`. Page has a small helper that
  accepts that shape, plain ISO strings, or anything else
  (best-effort). Same approach used elsewhere in the dashboard so
  there's no new dependency.

Test plan
- cargo fmt --all clean
- cargo clippy -p compliance-dashboard --features server
  -- -D warnings clean
- cargo clippy -p compliance-dashboard --features web
  --no-default-features -- -D warnings clean
- cargo check on both feature sets clean

Followup
- No sidebar entry yet (matches mcp_servers — settings-style
  pages are reached via direct URL today). Worth adding a
  Settings sub-menu in a separate UX pass.
- Token expiry + per-tool scope when those land on the agent side
  will need a small UI for the create modal (extra fields).

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

sharang force-pushed feat/m7.3-mcp-tokens-ui from eb88656c43 to 7e07ebeb53 2026-06-30 16:07:21 +00:00 Compare

sharang merged commit aed551231c into main 2026-06-30 16:32:56 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

P0-demo

CERTifAI P0 demo build tickets (CS-*)

bug

critical

enhancement

epic

Tracking issue spanning multiple sub-issues

high

infrastructure

onboarding

Multi-target onboarding wizard redesign

performance

security

v0.3.0

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

Benjamin_Boenisch sharang (Sharang Parnerkar)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: sharang/compliance-scanner-agent#94