fix(mcp): add shared operations and secure scene APIs

2026-04-27 17:10:25 -04:00
parent 058ee747c9
commit 8dfd1a9429
81 changed files with 1332 additions and 1786 deletions
@@ -33,12 +33,19 @@ Load an initial scene from disk:
 pascal-mcp --stdio --scene ./my-scene.json
 ```

-Expose it as HTTP for remote hosts:
+Expose it over loopback HTTP:

 ```bash
 pascal-mcp --http --port 8787
 ```

+Binding a non-loopback host requires a bearer token:
+
+```bash
+PASCAL_MCP_HTTP_TOKEN="$(openssl rand -hex 32)" \
+  pascal-mcp --http --host 0.0.0.0 --port 8787 --cors-origin https://editor.example
+```
+
 ## Local scene storage

 Scenes saved through MCP are stored in a local SQLite database: