Remote MCP servers

Agent version                  OAO control plane
┌──────────────────┐          ┌────────────────────────────────────┐
│ MCP binding      │─────────▶│ immutable toolset + server version │
│ namespace        │          │ exact credential-policy version    │
└────────┬─────────┘          └────────────────┬───────────────────┘
         │ session copies exact bindings       │ PostgreSQL + RLS
         ▼                                     ▼
┌──────────────────┐          ┌────────────────────────────────────┐
│ Flue durable run │─approval▶│ OAO MCP executor + egress broker   │
│ namespaced tool  │◀─result──│ live auth, fencing, audit, limits  │
└──────────────────┘          └────────────────┬───────────────────┘
                                              │ TLS; DNS/IP checked
                                              │ secret injected here
                                              ▼
                              ┌────────────────────────────────────┐
                              │ approved remote MCP HTTPS endpoint │
                              └────────────────────────────────────┘

read -r -s -p "MCP bearer token: " OAO_MCP_SECRET
echo

credential_id="$(
  curl --fail-with-body --silent \
    --request POST \
    --header "Authorization: Bearer $OAO_API_KEY" \
    --header 'Content-Type: application/json' \
    --header 'Idempotency-Key: create-example-mcp-credential-1' \
    --data "$(jq -n --arg secret "$OAO_MCP_SECRET" '{
      key: "example-mcp-credential",
      displayName: "Example MCP credential",
      kind: "static_bearer",
      headerName: null,
      secret: $secret
    }')" \
    "$OAO_API_URL/projects/$OAO_PROJECT_ID/mcp-credentials" \
  | jq -r '.id'
)"
unset OAO_MCP_SECRET

policy_version_id="$(
  curl --fail-with-body --silent \
    --request POST \
    --header "Authorization: Bearer $OAO_API_KEY" \
    --header 'Content-Type: application/json' \
    --header 'Idempotency-Key: create-example-mcp-policy-1' \
    --data "$(jq -n --arg credentialId "$credential_id" '{
      key: "example-mcp-policy",
      displayName: "Example MCP egress policy",
      credentialId: $credentialId,
      exactOrigin: "https://mcp.example.com",
      pathPrefix: "/mcp",
      timeoutMs: 30000,
      maximumResponseBytes: 1048576
    }')" \
    "$OAO_API_URL/projects/$OAO_PROJECT_ID/mcp-credential-policies" \
  | jq -r '.latestVersionId'
)"

server_id="$(
  curl --fail-with-body --silent \
    --request POST \
    --header "Authorization: Bearer $OAO_API_KEY" \
    --header 'Content-Type: application/json' \
    --header 'Idempotency-Key: create-example-mcp-server-1' \
    --data '{
      "key": "example-mcp",
      "displayName": "Example MCP",
      "endpointUrl": "https://mcp.example.com/mcp",
      "transport": "streamable_http"
    }' \
    "$OAO_API_URL/projects/$OAO_PROJECT_ID/mcp-servers" \
  | jq -r '.id'
)"

server_version_id="$(
  curl --fail-with-body --silent \
    --request POST \
    --header "Authorization: Bearer $OAO_API_KEY" \
    --header 'Content-Type: application/json' \
    --data "$(jq -n --arg policy "$policy_version_id" '{
      credentialPolicyVersionId: $policy
    }')" \
    "$OAO_API_URL/projects/$OAO_PROJECT_ID/mcp-servers/$server_id/discover" \
  | jq -r '.latestVersionId'
)"

toolset_version_id="$(
  curl --fail-with-body --silent \
    --request POST \
    --header "Authorization: Bearer $OAO_API_KEY" \
    --header 'Content-Type: application/json' \
    --header 'Idempotency-Key: create-example-mcp-toolset-1' \
    --data "$(jq -n --arg serverVersionId "$server_version_id" '{
      key: "example-read-tools",
      displayName: "Example read tools",
      serverVersionId: $serverVersionId,
      tools: [{remoteToolName: "list_items", approval: "always"}]
    }')" \
    "$OAO_API_URL/projects/$OAO_PROJECT_ID/mcp-toolsets" \
  | jq -r '.latestVersionId'
)"