mathias/gitea-mcp

Fork 0

T

mathiasandClaude Opus 5.5 724a997002

CD / Deploy via GitOps (push) Successful in 5s

Details

CD / Lint / Test / Vet (push) Successful in 31s

Details

CD / Build & Import (push) Successful in 14s

Details

feat(mcp): audit-log every tools/call (OWASP MCP08)

tools/call dispatched with no record, so repo_delete, pr_merge and
file_delete left no trail in gitea-mcp; only auth acceptance was logged.

One slog record per call: tool, caller, token fingerprint, target
(owner/repo/number/branch/path/tag), outcome, duration. Every other
argument is reduced to args_bytes so the audit line never copies file
content or issue bodies.

Closes #64

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-01 20:34:59 +02:00

.context

chore(context): adopt canonical context-sync.sh and re-sync adapters

2026-09-30 10:36:32 +02:00

.gitea

ci(deploy): refuse to patch a manifest with an empty IMAGE_TAG (infra#311)

2026-08-25 17:25:23 +02:00

.githooks

chore: adopt trunk-based development

2026-05-17 09:44:52 +02:00

.skills

feat(auth): JWT-or-static middleware + /.well-known/oauth-protected-resource (issue #5 )

2026-05-12 11:30:52 +02:00

cmd

fix(health): /healthz answers now, and /readyz takes a degraded pod out

2026-09-14 20:06:15 +02:00

docs

feat(admin): local-only stdio MCP server to mint scoped service-account tokens (dispatch#67)

2026-09-05 11:25:41 +02:00

internal

feat(mcp): audit-log every tools/call (OWASP MCP08)

2026-10-01 20:34:59 +02:00

scripts

chore(context): adopt canonical context-sync.sh and re-sync adapters

2026-09-30 10:36:32 +02:00

.gitignore

feat: initial scaffold with /healthz

2026-05-04 20:13:41 +02:00

.golangci.yml

chore(lint): adopt the canonical .golangci.yml from infra/ci-templates

2026-09-05 14:42:59 +02:00

AGENTS.md

chore(context): adopt canonical context-sync.sh and re-sync adapters

2026-09-30 10:36:32 +02:00

CLAUDE.md

chore(housekeeping): canonical git.d-ma.be host + honest version string

2026-07-03 23:58:34 +02:00

Dockerfile

build(version): inject real build version via ldflags (#47 )

2026-07-04 08:28:05 +02:00

go.mod

feat(auth): every accepted request names the path that granted it

2026-09-14 20:59:04 +02:00

go.sum

feat(auth): every accepted request names the path that granted it

2026-09-14 20:59:04 +02:00

README.md

chore: adopt trunk-based development

2026-05-17 09:44:52 +02:00

Taskfile.yml

fix(context): sync to the estate canonical context-sync.sh, drop Cursor/Aider

2026-09-05 08:01:07 +02:00

README.md

gitea-mcp

Streamable HTTP MCP service exposing Gitea repo operations to Claude apps. See ~/dev/AI/infra/docs/superpowers/specs/2026-05-04-gitea-mcp-gitops-workflow-design.md.

Quickstart

task setup:hooks   # installs .githooks/pre-push — runs task check before every push
task check         # context sync + lint + test + vet
task build         # produces bin/gitea-mcp

This repo uses Trunk-Based Development. Commit directly to main. The pre-push hook enforces the quality gate locally; CI re-runs task check on every push.