Skip to content

docs: MCP Server feature page#32

Merged
vigneshrajsb merged 7 commits into
mainfrom
mcp-server-docs
Jul 10, 2026
Merged

docs: MCP Server feature page#32
vigneshrajsb merged 7 commits into
mainfrom
mcp-server-docs

Conversation

@vigneshrajsb

@vigneshrajsb vigneshrajsb commented Jul 5, 2026

Copy link
Copy Markdown
Contributor

Summary

Adds a Features page for the new Lifecycle MCP Server (GoodRxOSS/lifecycle#224):

  • Plain-language intro and example prompts for non-engineering readers
  • Connect instructions for Claude Code, Cursor, VS Code, and Codex — paste-the-URL onboarding when the admin has enabled dynamic client registration, plus a "Without dynamic client registration" path (the default) using an admin pre-registered client ID
  • Tool reference table with parameters, plus the build resource
  • A one-page "How it works" section (SSO login, audience-bound tokens, read-only, runs under your identity), with an explicit visibility note: as with the REST API and UI, any authenticated user can read any build, service, log, or site — myEnvironmentsOnly/mineOnly are convenience filters, not access controls
  • Admin setup (web env vars + Keycloak realm via the lifecycle-keycloak helm chart), including a warning that resourceUrl + extraAudiences share one token trust boundary, and troubleshooting

Cross-links with the existing "MCP Integration" page (which covers the AI Agent consuming external MCP servers) to avoid confusion between the two directions.

Covers connecting Claude Code, Cursor, VS Code, and Codex; available tools
and parameters; a one-page explanation of how auth and identity work; and
operator setup via the helm chart or the realm setup script.
@vigneshrajsb vigneshrajsb requested a review from a team as a code owner July 5, 2026 22:52
Clarify that anonymous DCR is off by default and one-way to enable; add
end-user prerequisites (operator-enabled + VPN) and re-login guidance;
document extraAudiences and repeatable --mcp-resource-url; note read
visibility model; add limit default; expand MCP acronym.
The lifecycle-keycloak chart's setup Job is idempotent and runs on both
fresh installs and existing realms, so the standalone script (removed in
GoodRxOSS/lifecycle) is no longer a documented option.
# Conflicts:
#	src/pages/docs/features/_meta.ts
- disclose that all authenticated users can read all builds/services/logs/sites;
  clarify identity scopes filters, not visibility
- make the paste-the-URL onboarding conditional on dynamic client registration
  and add a 'Without dynamic client registration' setup subsection with
  verified per-client support (Claude Code, Cursor)
- replace the staging extraAudiences example with same-deployment URLs and
  warn about the shared token trust boundary
- use 'admin' instead of 'operator' for the role
@vigneshrajsb vigneshrajsb merged commit 691630f into main Jul 10, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants