Skip to content

Bugfender Claude Plugin - #10

Open
sirAlif wants to merge 4 commits into
mainfrom
feat/bf-claude-plugin
Open

Bugfender Claude Plugin#10
sirAlif wants to merge 4 commits into
mainfrom
feat/bf-claude-plugin

Conversation

@sirAlif

@sirAlif sirAlif commented Oct 27, 2026

Copy link
Copy Markdown
Member
  • Updated OAuth discovery to identify the exact https://mcp.bugfender.com/mcp resource
  • Added Claude connector conformance coverage for initialization, tool discovery, OAuth challenges, issuer ordering, resource binding, and response limits
  • Hardened tool errors with actionable messages while removing credentials and internal authentication details
  • Redacted sensitive fields and credentials embedded in returned URLs
  • Bounded tool responses and added safe truncation metadata for oversized results
  • Reduced default log and crash-device result sizes and added explicit pagination controls
  • Tightened tool input schemas, descriptions, and Anthropic-compatible safety metadata
  • Preserved credential isolation between simultaneous hosted MCP users
  • Added loopback HTTP configuration support for local Claude testing while retaining secure production URL validation
  • Migrated application discovery to the current /apps API endpoint
  • Added a Claude release checklist and documented connector validation requirements

@sirAlif
feat: Bugfender Claude Plugin
f54fa8b 
- Updated the hosted OAuth resource to use the exact MCP endpoint URL
@sirAlif
feat: Bugfender Claude Plugin
af4a282 
- Hardened MCP errors and redacted credentials from tool responses
- Added bounded responses, safer pagination, and smaller log and crash-device result limits
- Tightened tool schemas and metadata for Anthropic connector compatibility
- Expanded tests for truncation, sanitization, error handling, and concurrent user isolation
@sirAlif
feat: Bugfender Claude Plugin
94db392 
- Added Claude connector conformance tests and release validation checklist
@sirAlif
feat: Bugfender Claude Plugin
f5e4704 
- Allowed HTTP resource and issuer URLs for loopback hosts
- Migrated application listing to the newer /apps endpoint
- Added configuration coverage for local and insecure non-loopback URLs
@sirAlif
sirAlif requested a review from ventayol October 27, 2026 13:05

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ventayol ventayol Awaiting requested review from ventayol

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@sirAlif