Repository navigation
Point MCP sign-ins with no organization at Executor v2 - #2494
Merged
Merged
Conversation
Deploying with
|
| Status | Name | Latest Commit | Updated (UTC) |
|---|---|---|---|
| ✅ Deployment successful! View logs |
executor-cloud | 038dc0b | Nov 04 2026, 07:08 PM |
Contributor
Cloudflare previewTorn down — the PR is closed. |
Deploying with
|
| Status | Name | Latest Commit | Preview URL | Updated (UTC) |
|---|---|---|---|---|
| ✅ Deployment successful! View logs |
executor-marketing | 038dc0b | Commit Preview URL Branch Preview URL |
Nov 04 2026, 07:07 PM |
@executor-js/cli
@executor-js/config
@executor-js/execution
@executor-js/sdk
@executor-js/codemode-core
@executor-js/runtime-quickjs
@executor-js/plugin-file-secrets
@executor-js/plugin-graphql
@executor-js/plugin-keychain
@executor-js/plugin-mcp
@executor-js/plugin-onepassword
@executor-js/plugin-openapi
executor
commit: |
RhysSullivan
marked this pull request as ready for review
November 4, 2026 20:52
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
An MCP client can sign in through AuthKit to a brand-new account with no Executor Cloud organization (new sign-ups belong to Executor v2). Every MCP request then got 403 "No organization in session — log in via the web app first", which sends the person back to a v1 web app they should not be using. Clients kept retrying.
When neither the token nor the URL names an organization, the 403 now says Executor has moved and to connect
https://mcp.executor.sh/mcp. It also covers the rare account that joined a v1 organization after signing in: reconnect and sign in again to choose it.The status stays 403 with no
WWW-Authenticatechallenge. A 401 or aninsufficient_scopechallenge would make the client sign in again, which lands on the same account. MCP SDK clients surface the body of a plain 403 as the error text. Nothing else changes: pinned org URLs, members of an organization, forwarding for moved orgs, and the revoked-membership answer.Tests are in #2495.