chris/OSVauco
1
0
Fork 0
Code Issues 1 Pull Requests Actions 2 Packages Projects Releases Wiki Activity

docs(readme): document opax-mcp auth

Browse Source
This commit is contained in:
Chris Christiansen 2026-09-05 18:50:42 +00:00
parent 592944041f
commit 08029c8044
1 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
README.md
View File

@ -68,3 +68,17 @@ gcloud scheduler jobs create http daily-billing-snapshot \
--description="Kaller /billing/snapshot for å lagre daglig kostnadsdata."
```
Denne kommandoen oppretter en jobb som kjører hver dag kl. 05:00 UTC.
## OPAX MCP connector authentication
The public Cloud Run service permits network invocation so that third-party MCP clients can reach the application. Authentication is enforced by the application.
The server accepts a credential supplied in one of these request headers:
- `api-key`
- `X-MCP-Secret`
- `Authorization: Bearer <token>`
For every supported header form, the extracted credential must exactly match the `MCPSECRET` value injected from Google Secret Manager (`mcp-server-key`). The service rejects missing or non-matching credentials with HTTP 401.
Do not commit, log, or document the secret value itself.