yuqi1129 opened a new pull request, #11663:
URL: https://github.com/apache/gravitino/pull/11663

   ### What changes were proposed in this pull request?
   
   Document the MCP server's authentication and audit features in 
`docs/gravitino-mcp-server.md`:
   - New **Authentication** section: static `--token`/`GRAVITINO_TOKEN`, 
per-request `Authorization` forwarding in HTTP mode (Bearer/Basic, identity 
isolation, authorization enforced by Gravitino), and serving over HTTPS with 
`--tls-cert`/`--tls-key`.
   - New **Audit Logging** section: the `gravitino-mcp-audit.log` JSON record 
format and principal derivation.
   - Updated the **Configuration** table with `--token`, `--tls-cert`, 
`--tls-key`, and the `streamable-http` transport alias.
   
   > **Note:** This PR documents features implemented in #11622, which is not 
yet merged. It should be merged **after** #11622 lands so the docs do not 
describe unreleased behavior.
   
   ### Why are the changes needed?
   
   These features were added under EPIC #11573 (implementation in #11622) but 
were undocumented, so users had no guidance on authenticating the MCP server or 
reading its audit trail.
   
   ### Does this PR introduce _any_ user-facing change?
   
   Documentation only.
   
   ### How was this patch tested?
   
   Documentation change; no code. Verified the Markdown tables and sections 
render correctly.
   
   Fix: #11662


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to