Update ToolHive reference docs for v0.0.48

Author: github-actions[bot]

docs/toolhive/reference/cli/thv_config.md

@@ -27,7 +27,6 @@ The config command provides subcommands to manage application configuration sett
 * [thv config list-registered-clients](thv_config_list-registered-clients.md)	 - List all registered MCP clients
 * [thv config register-client](thv_config_register-client.md)	 - Register a client for MCP server configuration
 * [thv config remove-client](thv_config_remove-client.md)	 - Remove a client from MCP server configuration
-* [thv config secrets-provider](thv_config_secrets-provider.md)	 - Set the secrets provider type
 * [thv config set-ca-cert](thv_config_set-ca-cert.md)	 - Set the default CA certificate for container builds
 * [thv config set-registry-url](thv_config_set-registry-url.md)	 - Set the MCP server registry URL
 * [thv config unset-ca-cert](thv_config_unset-ca-cert.md)	 - Remove the configured CA certificate

docs/toolhive/reference/cli/thv_config_secrets-provider.md

@@ -46,6 +46,7 @@ thv run [flags] SERVER_OR_IMAGE_OR_PROTOCOL [-- ARGS...]
   -h, --help                                  help for run
       --host string                           Host for the HTTP proxy to listen on (IP or hostname) (default "127.0.0.1")
       --image-verification string             Set image verification mode (warn, enabled, disabled) (default "warn")
+      --isolate-network                       Isolate the container network from the host (default: false)
       --name string                           Name of the MCP server (auto-generated from image if not provided)
       --oidc-audience string                  Expected audience for the token
       --oidc-client-id string                 OIDC client ID
@@ -60,9 +61,9 @@ thv run [flags] SERVER_OR_IMAGE_OR_PROTOCOL [-- ARGS...]
       --permission-profile string             Permission profile to use (none, network, or path to JSON file) (default "network")
       --port int                              Port for the HTTP proxy to listen on (host port)
       --secret stringArray                    Specify a secret to be fetched from the secrets manager and set as an environment variable (format: NAME,target=TARGET)
-      --target-host string                    Host to forward traffic to (only applicable to SSE transport) (default "127.0.0.1")
-      --target-port int                       Port for the container to expose (only applicable to SSE transport)
-      --transport string                      Transport mode (sse or stdio) (default "stdio")
+      --target-host string                    Host to forward traffic to (only applicable to SSE or Streamable HTTP transport) (default "127.0.0.1")
+      --target-port int                       Port for the container to expose (only applicable to SSE or Streamable HTTP transport)
+      --transport string                      Transport mode (sse, streamable-http or stdio) (default "stdio")
   -v, --volume stringArray                    Mount a volume into the container (format: host-path:container-path[:ro])
 ```
 

docs/toolhive/reference/cli/thv_run.md

@@ -24,7 +24,8 @@ The secret command provides subcommands to set, get, delete, and list secrets.
 * [thv secret delete](thv_secret_delete.md)	 - Delete a secret
 * [thv secret get](thv_secret_get.md)	 - Get a secret
 * [thv secret list](thv_secret_list.md)	 - List all available secrets
-* [thv secret provider](thv_secret_provider.md)	 - Configure the secrets provider
+* [thv secret provider](thv_secret_provider.md)	 - Configure the secrets provider directly
 * [thv secret reset-keyring](thv_secret_reset-keyring.md)	 - Reset the keyring secret
 * [thv secret set](thv_secret_set.md)	 - Set a secret
+* [thv secret setup](thv_secret_setup.md)	 - Set up secrets provider
 

docs/toolhive/reference/cli/thv_secret.md

@@ -1,9 +1,10 @@
 ## thv secret provider
 
-Configure the secrets provider
+Configure the secrets provider directly
 
 ### Synopsis
 
+For most users, it is recommended to use "thv secret setup" instead.
 Configure the secrets provider.
 Valid secrets providers are:
   - encrypted: Full read-write secrets provider

docs/toolhive/reference/cli/thv_secret_provider.md

@@ -0,0 +1,37 @@
+## thv secret setup
+
+Set up secrets provider
+
+### Synopsis
+
+Interactive setup for configuring a secrets provider.
+This command will guide you through selecting and configuring
+a secrets provider for storing and retrieving secrets.
+
+Available providers:
+  - encrypted: Stores secrets in an encrypted file using AES-256-GCM using the OS Keyring
+  - 1password: Read-only access to 1Password secrets (requires OP_SERVICE_ACCOUNT_TOKEN)
+  - none: Disables secrets functionality
+
+You must run this command before using any other secrets functionality.
+
+```
+thv secret setup [flags]
+```
+
+### Options
+
+```
+  -h, --help   help for setup
+```
+
+### Options inherited from parent commands
+
+```
+      --debug   Enable debug mode
+```
+
+### SEE ALSO
+
+* [thv secret](thv_secret.md)	 - Manage secrets
+

docs/toolhive/reference/cli/thv_secret_setup.md

@@ -13,6 +13,7 @@ thv stop [container-name] [flags]
 ### Options
 
 ```
+      --all           Stop all running MCP servers
   -h, --help          help for stop
       --timeout int   Timeout in seconds before forcibly stopping the container (default 30)
 ```