Repository navigation
feat(connectors): DataForSEO over stdio with vault creds; gate catches lost connector auth (v0.458.0) - #864
Merged
Conversation
…s lost connector auth (v0.458.0) The hosted mcp.dataforseo.com URL authorizes with an OAuth grant held in Claude Code's own config dir: it expires, is absent on pooled runtime accounts, and when missing Claude Code swaps every tool for authenticate/complete_authentication stubs an unattended run can't finish. - Catalog: "DataForSEO" (dataforseo-mcp-server@3.1.3) and "DataForSEO (v2 tools)" (@2.9.13), stdio, DATAFORSEO_LOGIN/PASSWORD from the vault. Pinned because v2->v3 renamed every tool. - npx connectors are pre-fetched at boot and on add/enable (cold install measured 21-35s, near the MCP startup timeout). - A call to any connector's OAuth stub is audited connector.auth.lost, cards the admins once per connector per 6h with the fix, and is refused on unattended runs with a reason the agent can act on. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Why
DataForSEO "keeps disconnecting" on every tenant that uses it. Every DataForSEO connector pointed at the hosted
mcp.dataforseo.comURL with no headers, so it authorized through an OAuth grant stored in Claude Code's own config dir. That grant expires, and it's absent on pooled runtime accounts. When it's missing, Claude Code replaces every tool withauthenticate/complete_authenticationstubs, which an unattended run can't complete. One tenant's transcripts hold 20 such stub calls. initech'scomposio-companyhas been failing the same way since 2026-09-08, and no admin was told.What
DataForSEO(dataforseo-mcp-server@3.1.3) andDataForSEO (v2 tools)(@2.9.13). Both run over stdio withsecret:DATAFORSEO_LOGIN/secret:DATAFORSEO_PASSWORD, so each call is plain Basic auth with nothing to expire. Versions are pinned because v2 → v3 renamed every tool.npxinstall measured 21–35s, close to the MCP startup timeout. Enabled npx connectors are now fetched at boot and on add/enable (connector.warmed).connector.auth.lostand posts one admin card per connector per 6h with the fix. On an unattended run the call is also refused, with a reason the agent can act on.Runbook:
docs/connectors/dataforseo.md. Pinned byscripts/connector-auth-stub-test.cjs, which is added totest:governance.Verified
npm run build,cd web && npm run build, and the fullnpm run test:governanceall pass.🤖 Generated with Claude Code