yuqi1129 opened a new pull request, #11663: URL: https://github.com/apache/gravitino/pull/11663
### What changes were proposed in this pull request? Document the MCP server's authentication and audit features in `docs/gravitino-mcp-server.md`: - New **Authentication** section: static `--token`/`GRAVITINO_TOKEN`, per-request `Authorization` forwarding in HTTP mode (Bearer/Basic, identity isolation, authorization enforced by Gravitino), and serving over HTTPS with `--tls-cert`/`--tls-key`. - New **Audit Logging** section: the `gravitino-mcp-audit.log` JSON record format and principal derivation. - Updated the **Configuration** table with `--token`, `--tls-cert`, `--tls-key`, and the `streamable-http` transport alias. > **Note:** This PR documents features implemented in #11622, which is not yet merged. It should be merged **after** #11622 lands so the docs do not describe unreleased behavior. ### Why are the changes needed? These features were added under EPIC #11573 (implementation in #11622) but were undocumented, so users had no guidance on authenticating the MCP server or reading its audit trail. ### Does this PR introduce _any_ user-facing change? Documentation only. ### How was this patch tested? Documentation change; no code. Verified the Markdown tables and sections render correctly. Fix: #11662 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
