rusackas opened a new pull request, #43637: URL: https://github.com/apache/superset/pull/43637
### SUMMARY #41003 added embedded guest-token authentication to the MCP service (`MCP_EMBEDDED_GUEST_AUTH_ENABLED`, `MCP_GUEST_DENIED_TOOLS`, sharing `GUEST_TOKEN_JWT_SECRET`/`GUEST_TOKEN_JWT_AUDIENCE` with core), but only documented it in the service's internal `SECURITY.md`/`CLAUDE.md`. The public admin docs' MCP Authentication section covers dev mode, JWT auth, and custom auth providers, but never mentions guest-token auth. This adds an "Embedded Guest Authentication" subsection alongside the existing auth methods, plus the two new settings in the Configuration Reference table. ### BEFORE/AFTER SCREENSHOTS OR ANIMATED GIF N/A — docs-only change. ### TESTING INSTRUCTIONS - `pre-commit run --files docs/admin_docs/configuration/mcp-server.mdx` passes. - Visual check: the new section renders under Authentication, between "Custom Auth Provider" and "Connecting AI Clients". ### ADDITIONAL INFORMATION - [ ] Has associated issue: - [x] Required feature flags: `EMBEDDED_SUPERSET` (documented, not introduced here) - [ ] Changes UI - [ ] Includes DB Migration (follow approval process in [SIP-59](https://github.com/apache/superset/issues/13351)) - [ ] Introduces new feature or API - [ ] Removes existing feature or API -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
