From af5ed51e2fbb6571efe324978f3b9b9f86cb2c11 Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Tue, 15 Sep 2026 02:22:09 +0000 Subject: [PATCH 1/3] docs: fix outdated Codex MCP setup instructions MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Replace broken config.toml + 'codex mcp login' primary path with 'codex mcp add sourcebot --url ' which matches Settings → MCP - Add tip near Getting Started pointing users to Settings → MCP for easiest setup (one-click install cards) - Update Codex docs link to current official location - Fix API key path to use CLI flag instead of manual config.toml editing Co-authored-by: Michael Sukkarieh --- docs/docs/features/mcp-server.mdx | 31 +++++++++++++++++-------------- 1 file changed, 17 insertions(+), 14 deletions(-) diff --git a/docs/docs/features/mcp-server.mdx b/docs/docs/features/mcp-server.mdx index 890175eb6..9ddaa0a66 100644 --- a/docs/docs/features/mcp-server.mdx +++ b/docs/docs/features/mcp-server.mdx @@ -27,6 +27,10 @@ You can read more about the options in the [authorization](#authorization) secti If [anonymous access](https://docs.sourcebot.dev/docs/configuration/auth/access-settings#anonymous-access) is enabled on your Sourcebot instance, no OAuth token or API key is required. You can connect directly to the MCP endpoint without any authorization. + + **Fastest setup:** Open **Settings → MCP** in your Sourcebot deployment to copy the Server URL and use one-click install cards for supported clients. The examples below are useful when you need to customize the URL for self-hosted deployments or use API key authentication. + + The examples below add the MCP server and connect it to Sourcebot's public deployment at [app.sourcebot.dev](https://app.sourcebot.dev). Replace the URL with your own Sourcebot deployment as needed. @@ -145,30 +149,29 @@ You can read more about the options in the [authorization](#authorization) secti - [Codex MCP docs](https://developers.openai.com/codex/mcp) - - Add the following to your `~/.codex/config.toml` file: + [Codex MCP docs](https://learn.chatgpt.com/docs/extend/mcp) - ```toml - [mcp_servers.sourcebot] - url = "https://app.sourcebot.dev/api/mcp" - ``` - - Replace `https://app.sourcebot.dev` with wherever your Sourcebot instance is hosted. Then run the following to authenticate: + Run the following command: ```sh - codex mcp login sourcebot + codex mcp add sourcebot --url https://app.sourcebot.dev/api/mcp ``` + + Replace `https://app.sourcebot.dev` with wherever your Sourcebot instance is hosted. Codex will automatically detect OAuth support and prompt you to authorize in your browser when you first connect. + + + Open **Settings → MCP** in your Sourcebot deployment and click **Copy command** on the Codex card for a ready-to-run command with the correct Server URL. + - ```toml - [mcp_servers.sourcebot] - url = "https://app.sourcebot.dev/api/mcp" - bearer_token_env_var = "SOURCEBOT_API_KEY" + Run the following command: + + ```sh + codex mcp add sourcebot --url https://app.sourcebot.dev/api/mcp --bearer-token-env-var SOURCEBOT_API_KEY ``` Replace `https://app.sourcebot.dev` with wherever your Sourcebot instance is hosted, then set your API key as an environment variable: From f423e09b0f229b80452e44079428080a438f3c69 Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Tue, 15 Sep 2026 02:26:18 +0000 Subject: [PATCH 2/3] docs: remove anonymous access mentions from MCP docs Co-authored-by: Michael Sukkarieh --- docs/docs/features/mcp-server.mdx | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/docs/docs/features/mcp-server.mdx b/docs/docs/features/mcp-server.mdx index 9ddaa0a66..388b4ca77 100644 --- a/docs/docs/features/mcp-server.mdx +++ b/docs/docs/features/mcp-server.mdx @@ -23,10 +23,6 @@ Sourcebot MCP uses a [Streamable HTTP](https://modelcontextprotocol.io/specifica You can read more about the options in the [authorization](#authorization) section. - - If [anonymous access](https://docs.sourcebot.dev/docs/configuration/auth/access-settings#anonymous-access) is enabled on your Sourcebot instance, no OAuth token or API key is required. You can connect directly to the MCP endpoint without any authorization. - - **Fastest setup:** Open **Settings → MCP** in your Sourcebot deployment to copy the Server URL and use one-click install cards for supported clients. The examples below are useful when you need to customize the URL for self-hosted deployments or use API key authentication. @@ -279,7 +275,7 @@ You can read more about the options in the [authorization](#authorization) secti ## Authorization -The Sourcebot MCP server supports two authorization methods, OAuth and API keys. If [anonymous access](/docs/configuration/auth/access-settings#anonymous-access) is enabled on your instance, no authorization is required. +The Sourcebot MCP server supports two authorization methods: OAuth and API keys. Regardless of which method you use, all MCP requests are scoped to the associated Sourcebot user and inherit the [user's role and permissions](/docs/configuration/auth/roles-and-permissions). When [permission syncing](/docs/features/permission-syncing) is configured, this includes repository permissions - the MCP server will only surface results from repositories the user has access to. From 01c32dab3ef137fb80c7ad5b67924030fce17222 Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Tue, 15 Sep 2026 02:30:57 +0000 Subject: [PATCH 3/3] docs: consolidate example notes and restore anonymous access mention - Remove redundant sentence from Fastest setup tip - Combine public deployment note with anonymous access into single Note - Restore anonymous access mention in Authorization section Co-authored-by: Michael Sukkarieh --- docs/docs/features/mcp-server.mdx | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/docs/docs/features/mcp-server.mdx b/docs/docs/features/mcp-server.mdx index 388b4ca77..85fd16721 100644 --- a/docs/docs/features/mcp-server.mdx +++ b/docs/docs/features/mcp-server.mdx @@ -24,11 +24,13 @@ Sourcebot MCP uses a [Streamable HTTP](https://modelcontextprotocol.io/specifica You can read more about the options in the [authorization](#authorization) section. - **Fastest setup:** Open **Settings → MCP** in your Sourcebot deployment to copy the Server URL and use one-click install cards for supported clients. The examples below are useful when you need to customize the URL for self-hosted deployments or use API key authentication. + **Fastest setup:** Open **Settings → MCP** in your Sourcebot deployment to copy the Server URL and use one-click install cards for supported clients. - The examples below add the MCP server and connect it to Sourcebot's public deployment at [app.sourcebot.dev](https://app.sourcebot.dev). Replace the URL with your own Sourcebot deployment as needed. + Note the following about these examples: + - The examples add the MCP server and connect it to Sourcebot's public deployment at [app.sourcebot.dev](https://app.sourcebot.dev). Replace the URL with your own Sourcebot deployment as needed. + - If [anonymous access](/docs/configuration/auth/access-settings#anonymous-access) is enabled on your Sourcebot instance, no OAuth token or API key is required. You can connect directly to the MCP endpoint without any authorization. @@ -275,7 +277,7 @@ You can read more about the options in the [authorization](#authorization) secti ## Authorization -The Sourcebot MCP server supports two authorization methods: OAuth and API keys. +The Sourcebot MCP server supports two authorization methods: OAuth and API keys. If [anonymous access](/docs/configuration/auth/access-settings#anonymous-access) is enabled on your instance, no authorization is required. Regardless of which method you use, all MCP requests are scoped to the associated Sourcebot user and inherit the [user's role and permissions](/docs/configuration/auth/roles-and-permissions). When [permission syncing](/docs/features/permission-syncing) is configured, this includes repository permissions - the MCP server will only surface results from repositories the user has access to.