Skip to content

docs(roadmap): give the MCP server its M5 row - #389

Open
QSchlegel wants to merge 1 commit into
preprodfrom
docs/roadmap-m5-mcp
Open

docs(roadmap): give the MCP server its M5 row#389
QSchlegel wants to merge 1 commit into
preprodfrom
docs/roadmap-m5-mcp

Conversation

@QSchlegel

Copy link
Copy Markdown
Collaborator

Eleven PRs of MCP server work merged in August against no roadmap row at all. Before this, ROADMAP.md mentioned MCP exactly once — in Andre's M6, as "MCP unsigned transaction creation" — which reads as though the server is still to be built.

What actually shipped in M5

PR What
#357 Stateless MCP endpoint behind an OAuth 2.1 authorization server — authorization codes, refresh tokens and client secrets persisted as SHA-256 hashes, mirroring the BotClaimToken pattern
#358, #360, #361 Governance tools, connection management, vendor-neutral setup guide
#363, #365 Permissions management, per-wallet MCP activity, published tool list
#367 Every scope reachable, and the user picks which to grant
#370 Setup instructions that work for GUI clients
#359, #366 "Connect via MCP" hero button; CTA/card overflow fix
#376 Read-only document tools, on a new v1 REST surface

Surface as shipped: 15 tools over 4 scopes — wallets:read, governance:read, documents:read, ballots:write. One write scope; nothing signs or broadcasts.

Why M6 changed too

M5 now delivers the endpoint, OAuth, scopes and tool registry that Andre's M6 row was implicitly going to build, so that row is cross-referenced: what remains there is the unsigned-transaction write path, not a second server.

Worth noting for that month — M6's own constraint, "MCP must not sign or broadcast on the user's behalf", already holds by construction: src/lib/mcp/scopes.ts defines no signing or broadcast scope, so it is enforced by the grant model rather than by care.

Scope

ROADMAP.md only — three lines. No code, no schema, no migration.

Eleven PRs of MCP work merged in August — the stateless endpoint and its
OAuth 2.1 authorization server (#357), governance tools, scope-by-scope
consent (#367), connection management and per-wallet activity (#363,
#365), the published tool list, GUI-client setup docs (#370) and
read-only document tools on a v1 REST surface (#376) — against no
roadmap row at all. The roadmap named MCP exactly once, in Andre's M6.

Also cross-references that M6 row, because M5 now delivers the endpoint,
OAuth, scopes and tool registry it was implicitly going to build: what
remains there is the unsigned-transaction write path, not a second
server. The shipped surface is 15 tools over 4 scopes with only
`ballots:write` writing and nothing signing or broadcasting, so M6's
"must not sign or broadcast" constraint already holds by construction.
@vercel

vercel Bot commented Aug 25, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
multisig Ready Ready Preview Aug 25, 2026 8:21am

Request Review

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant