Merge pull request #870 from qwertystars/fix/mcp-oauth-autodetect

fix(mcp): disable OAuth auto-detection for built-in MCPs

src/mcp/context7.ts

@@ -2,4 +2,5 @@ export const context7 = {
   type: "remote" as const,
   url: "https://mcp.context7.com/mcp",
   enabled: true,
+  oauth: false as const,
 }

src/mcp/grep-app.ts

@@ -2,4 +2,5 @@ export const grep_app = {
   type: "remote" as const,
   url: "https://mcp.grep.app",
   enabled: true,
+  oauth: false as const,
 }

src/mcp/index.ts

@@ -10,6 +10,7 @@ type RemoteMcpConfig = {
   url: string
   enabled: boolean
   headers?: Record<string, string>
+  oauth?: false
 }
 
 const allBuiltinMcps: Record<McpName, RemoteMcpConfig> = {

src/mcp/websearch.ts

@@ -5,4 +5,6 @@ export const websearch = {
   headers: process.env.EXA_API_KEY
     ? { "x-api-key": process.env.EXA_API_KEY }
     : undefined,
+  // Disable OAuth auto-detection - Exa uses API key header, not OAuth
+  oauth: false as const,
 }