[security] Add MCP elicitation for secure preview token handling#57

Open

mattpodwysocki wants to merge 11 commits intomainfrom

add-preview-token-elicitation

Commits on Jan 13, 2026

Add MCP elicitation for secure preview token handling

mattpodwysocki
and
claude
committed
Fix: Ensure preview tokens are created as public tokens (pk.*)

mattpodwysocki
and
claude
committed
Fix: Use only public scopes to create public tokens (pk.*)

mattpodwysocki
and
claude
committed
Fix: Check client elicitation capability before using elicitInput()

mattpodwysocki
and
claude
committed
Docs: Clarify varying MCP elicitation support across clients

mattpodwysocki
and
claude
committed
Docs: Update elicitation support status for Cursor and VS Code

mattpodwysocki
and
claude
committed
Docs: Add Goose elicitation bug report and documentation

mattpodwysocki
and
claude
committed
Docs: Link to filed Goose elicitation bug issue

mattpodwysocki
and
claude
committed
Remove redundant Goose bug report file

mattpodwysocki
and
claude
committed
Tests: Add unit tests for elicitation and token storage

mattpodwysocki
and
claude
committed

Commits on Jan 14, 2026

Docs: Confirm Claude Code does not support elicitation yet

mattpodwysocki
and
claude
committed