Add cookbook: Authorize mcp-use tools with Scalekit scopes by saif-at-scalekit · Pull Request #952 · scalekit-inc/developer-docs

saif-at-scalekit · 2026-08-16T13:07:44Z

Do not merge yet

This cookbook imports oauthScalekitProvider from mcp-use/oauth/scalekit. The page must not go live while that path 404s on npm.

Merge gates

feat(oauth): add Scalekit provider mcp-use/mcp-use#2272 is merged
A published mcp-use release exports mcp-use/oauth/scalekit
The import in the recipe resolves from that release

Until then, keep this draft. The in-page caution sends readers to scalekit-mcpuse-example.

What this cookbook teaches

A practical Inspector loop, not a provider-wiring page:

Authenticate a user with Scalekit on an mcp-use server
Grant todo:read and todo:write (same pair as the FastMCP todo quickstart)
Prove allow (list_todos) and deny (add_todo without write) in the mcp-use Inspector

mcp-use does not hide tools when a scope is missing. The handler must refuse. The deny path is the test.

Stacked on #946. File: src/content/docs/saaskit/cookbooks/authorize-mcp-use-tools-with-scalekit-scopes.mdx

Preview

https://deploy-preview-952--scalekit-starlight.netlify.app/saaskit/cookbooks/authorize-mcp-use-tools-with-scalekit-scopes/

Split cookbooks into AgentKit and Auth for SaaS shelves as plain Starlight docs (no starlight-blog). Each product gets a dedicated guides topic with Cookbooks and How-to collapsibles, entered from secondary nav rather than the journey sidebars.

Local Netlify edge middleware mishandles empty-body POSTs and threw unhandled TypeError: fetch failed on every page load's session probe. Exclude /auth/* and /api/* from edge functions and send an explicit JSON body on refresh POSTs.

Move cookbook image assets to match the product-scoped page paths. The Chargebee cookbook already pointed at @/assets/docs/saaskit/cookbooks/ while the files still sat under the retired cookbooks/ namespace, which failed the production build with ImageNotFound. Local dev never caught it because it compiles pages only on visit. - Move chargebee assets to src/assets/docs/saaskit/cookbooks/ and voice assistant assets to src/assets/docs/agentkit/cookbooks/, repointing the two voice-assistant references that were still on the old path - Exclude the cross-product hub /cookbooks/ from sidebar topics and give it the splash template, so it no longer inherits the Auth for SaaS journey rail or lights up a product nav pill; link it from both product shelves - Redirect the routes starlight-blog used to generate: /cookbooks/tags/*, /cookbooks/authors/*, and pagination pages 2-5 - Rewrite the connected-account how-to to stop duplicating the status table and per-status remedies already in the AgentKit troubleshooting guide; it now covers dashboard navigation and delegates the rest - Correct the AgentKit how-to overview, which promised workspace tasks it does not ship, and cross-link the shared workspace guides from both how-to overviews - Keep /api/* tracked in track-agents: agents fetch the OpenAPI specs under it, and only /auth/refresh hit the empty-body POST proxy bug - Add saaskit/cookbooks and saaskit/how-to to the SaaSKit and Integration Guides llms.txt sets, which lost their cookbook paths in the move - Move the orphaned scim-simulator page into dev-kit/tools/ beside the other testing utilities, retiring the now-empty dev-kit/guides/ tree - Restore the P.A.T. framework, content-layer model, and naming rules to COOKBOOKS.md, and document the image and redirect rules for future moves

Move Auth for SaaS cookbooks and how-tos out of Developer Resources into a secondary nav Guides item that matches AgentKit and opens the dedicated guides sidebar.

Guides sits with SDKs/APIs; Enterprise Deployment stays at the end of the bar.

Secondary nav ends with Guides, then Developer Resources dropdown, then Enterprise Deployment last.

Rename secondary-nav Guides to Cookbooks, keep How-to open, and serve the same dashboard how-tos from /how-to in both product shelves. Add the first workspace-role, account, and development-domain recipes from the live dashboard.

Preserve URL fragments when stamping ?product= on /how-to/ links. Document assignHowToTopic. Tell readers not to copy client secrets before deleting an account.

coderabbitai · 2026-08-16T13:08:04Z

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: c8e18265-e917-4027-bc31-4b14a486ca2c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

_{Comment @coderabbitai help to get the list of available commands.}

netlify · 2026-08-16T13:14:07Z

✅ Deploy Preview for scalekit-starlight ready!

Name	Link
🔨 Latest commit	`d2605f5`
🔍 Latest deploy log	https://app.netlify.com/projects/scalekit-starlight/deploys/6a82daaa06de6700081a1d8f
😎 Deploy Preview	https://deploy-preview-952--scalekit-starlight.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
Lighthouse	1 paths audited Performance: 72 (🟢 up 12 from production) Accessibility: 100 (no change from production) Best Practices: 92 (no change from production) SEO: 92 (no change from production) PWA: - View the detailed breakdown and full score reports
🤖 Make changes	Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

Draft only. Do not merge until mcp-use/oauth/scalekit installs from npm.

Teach Scalekit login, todo:read/todo:write grants, and Inspector allow/deny. Rename the file to match the new task.

946 moved cookbooks to product paths and dropped starlight-blog frontmatter. Keep this recipe next to the other Auth for SaaS pages and point the M2M link at the new URL.

Match the xmcp roll-out-to-a-team shape: leaked mcp.json first, four checks before you share the URL, then identity and scopes as two layers. Alice and Bob prove isolation. Reconnect the client after a DCR or CIMD toggle.

Keep the Inspector allow/deny recipe. Apply the xmcp page's writing moves: conclusion first, outcome headings, four checks, and a tight troubleshooting table. Leave the npm-export caution in place.

saif-at-scalekit added 8 commits August 13, 2026 16:53

feat(nav): top-level Guides for both products

82b3c0a

Move Auth for SaaS cookbooks and how-tos out of Developer Resources into a secondary nav Guides item that matches AgentKit and opens the dedicated guides sidebar.

fix(nav): put AgentKit Enterprise Deployment last in secondary nav

70979bd

Guides sits with SDKs/APIs; Enterprise Deployment stays at the end of the bar.

fix(nav): Auth for SaaS order Guides, Developer Resources, Enterprise

7b59c35

Secondary nav ends with Guides, then Developer Resources dropdown, then Enterprise Deployment last.

feat(docs): share how-tos and add dashboard role recipes

ab4ae33

Rename secondary-nav Guides to Cookbooks, keep How-to open, and serve the same dashboard how-tos from /how-to in both product shelves. Add the first workspace-role, account, and development-domain recipes from the live dashboard.

fix(docs): keep how-to hashes and stop exporting secrets

e32ac62

Preserve URL fragments when stamping ?product= on /how-to/ links. Document assignHowToTopic. Tell readers not to copy client secrets before deleting an account.

This was referenced Aug 16, 2026

Switch this example to the published mcp-use Scalekit provider scalekit-developers/scalekit-mcpuse-example#2

Open

Switch to the published mcp-use Scalekit provider scalekit-developers/scalekit-mcpuse-example#3

Open

saif-at-scalekit changed the title ~~Add cookbook: Protect an mcp-use server with Scalekit~~ Add cookbook: Authorize mcp-use tools with Scalekit scopes Aug 16, 2026

saif-at-scalekit force-pushed the cookbook/protect-mcp-use-server-with-scalekit branch from f1d31f5 to bca362f Compare August 17, 2026 09:45

saif-at-scalekit changed the base branch from main to prototype/sidebar-cookbooks-howto August 17, 2026 09:45

saif-at-scalekit added 3 commits August 17, 2026 15:16

Add cookbook for protecting an mcp-use server with Scalekit

2b8586e

Draft only. Do not merge until mcp-use/oauth/scalekit installs from npm.

Rewrite cookbook around scoped tool authorization

61d0b71

Teach Scalekit login, todo:read/todo:write grants, and Inspector allow/deny. Rename the file to match the new task.

docs: land mcp-use cookbook on the SaaSKit shelf

52ad4fb

946 moved cookbooks to product paths and dropped starlight-blog frontmatter. Keep this recipe next to the other Auth for SaaS pages and point the M2M link at the new URL.

saif-at-scalekit force-pushed the cookbook/protect-mcp-use-server-with-scalekit branch from bca362f to 52ad4fb Compare August 17, 2026 09:46

docs: rewrite mcp-use cookbook as a team rollout

a488341

Match the xmcp roll-out-to-a-team shape: leaked mcp.json first, four checks before you share the URL, then identity and scopes as two layers. Alice and Bob prove isolation. Reconnect the client after a DCR or CIMD toggle.

saif-at-scalekit changed the title ~~Add cookbook: Authorize mcp-use tools with Scalekit scopes~~ Add cookbook: Share an mcp-use server with your team Aug 17, 2026

docs: restore scopes cookbook and raise the writing

d2605f5

Keep the Inspector allow/deny recipe. Apply the xmcp page's writing moves: conclusion first, outcome headings, four checks, and a tight troubleshooting table. Leave the npm-export caution in place.

saif-at-scalekit changed the title ~~Add cookbook: Share an mcp-use server with your team~~ Add cookbook: Authorize mcp-use tools with Scalekit scopes Aug 17, 2026

saif-at-scalekit force-pushed the prototype/sidebar-cookbooks-howto branch from e32ac62 to 5083ccd Compare August 20, 2026 06:44

Navigation Menu

Uh oh!

Add cookbook: Authorize mcp-use tools with Scalekit scopes - #952

Add cookbook: Authorize mcp-use tools with Scalekit scopes#952
saif-at-scalekit wants to merge 13 commits into
prototype/sidebar-cookbooks-howtofrom
cookbook/protect-mcp-use-server-with-scalekit

saif-at-scalekit commented Aug 16, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Aug 16, 2026 •

edited

Loading

Review skipped

Uh oh!

netlify Bot commented Aug 16, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

saif-at-scalekit commented Aug 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Do not merge yet

What this cookbook teaches

Preview

Uh oh!

coderabbitai Bot commented Aug 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

netlify Bot commented Aug 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for scalekit-starlight ready!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

saif-at-scalekit commented Aug 16, 2026 •

edited

Loading

coderabbitai Bot commented Aug 16, 2026 •

edited

Loading

netlify Bot commented Aug 16, 2026 •

edited

Loading