feat(search-mcp): connect clients with Sim OAuth
Merged
WA
2mo ago+27405+27405+01234567890123456789012345678901234567890123456789-507-507-012345678901234567890123456789
Summary
- Connect Search MCP through Sim OAuth with read-only, resource-bound grants, PKCE, token refresh, and public client registration.
- Replace API-key setup with shared EMCN connection instructions for Claude, Codex, Claude Code, Cursor, and other compatible clients.
- Preserve existing API-key/API OAuth access and current organization membership and document permissions.
Type of Change
- Feature
Testing
- Tested native Codex, Claude Code, and Cursor OAuth connections and all three Search tools, including refresh and revocation.
- Focused UI/auth/MCP tests, native PostgreSQL OAuth tests, ACL integration tests, and OpenAPI tests passed.
- Full cleanup, lint, workspace type checks, repository audits, and migration safety checks passed.
- Claude web/Desktop cloud connection still requires verification against the deployed HTTPS endpoint.
Checklist
- Code follows project style guidelines
- Self-reviewed my changes
- Tests added/updated and passing
- No new warnings introduced
- I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)