vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

nix: extraMcpServers http entries can read request headers from one file via headersHelper

Browse source
This commit is contained in:
damocles 2026-10-20 12:58:25 +02:00
commit 53eed2a757
3 changed files with 79 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
docs/turn-loop/mcp.md
View file

@ -21,6 +21,11 @@ the tools land in claude as
toggle (default `false`) — see
[`docs/tools/subagent.md`](../tools/subagent.md#mcp-servers-available-to-a-subagent)
for what reaches a subagent's own `--mcp-config` and what doesn't.
An `"http"` entry that needs request headers (a bearer-authenticated remote
server) sets `headersFile` to an absolute path: a file holding a JSON object
of header name to value. It renders as claude's `headersHelper` (`cat` of the
file), so the secret never enters the nix store, and claude re-reads a rotated token
on its next reconnect. ACP agents don't read it.
The agent's permissions gate tool access
([`docs/process/conventions.md#permissions`](../process/conventions.md)).