feat(credential-groups): add personal MCP OAuth connections

[TheodoreSpeaks]

Summary

• let Credential Groups offer OAuth MCP servers to invited people
• keep each invitee MCP grant separate and enforce group workflow policies during execution
• revoke managed connections and release MCP assignments when servers, people, or groups are removed
• replace the API-key enrollment implementation

Type of Change

• Feature

Testing

• bun run lint
• bun run check:audits
• bun run check:migrations origin/staging
• 175 focused Credential Group and MCP tests
• tested a generic OAuth MCP connection locally

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
docs	Skipped		Sep 2, 2026 1:49am UTC

[greptile-apps]

Greptile Summary

The PR adds invitee-specific OAuth connections for MCP servers in Credential Groups and integrates those managed connections into workflow authoring and execution.

• Adds public enrollment OAuth initiation and callback handling for managed MCP servers.
• Adds workspace-scoped managed MCP catalogs and workflow-tool selection.
• Enforces Credential Group access policies during managed tool execution.
• Adds connection retirement, assignment cleanup, schema constraints, and lifecycle tests.

Confidence Score: 5/5

The PR appears safe to merge because no blocking failure remains in the eligible follow-up-review scope.

No blocking failure remains.

Important Files Changed

Filename	Overview
apps/sim/app/api/mcp/oauth/callback/route.ts	Adds a sessionless, rate-limited callback path for Credential Group managed MCP OAuth attempts.
apps/sim/lib/mcp/application/execute-managed-tool.ts	Executes managed MCP tools through the authorized Credential Group policy boundary and versioned token persistence.
apps/sim/lib/credential-groups/application/public-enrollment.ts	Coordinates public enrollment reads and the start and completion of invitee MCP OAuth.
apps/sim/lib/mcp/orchestration/server-lifecycle.ts	Extends MCP server lifecycle handling to retire managed connections and release Credential Group assignments.
packages/db/migrations/0315_credential_group_managed_mcp.sql	Introduces the persistent relationships needed for Credential Group managed MCP connections.
packages/db/migrations/0316_credential_group_managed_mcp_constraints.sql	Adds relational constraints for managed MCP assignments and credential lifecycle.
packages/db/migrations/0317_managed_mcp_external_identity.sql	Adds external identity metadata for managed MCP connections.
packages/db/schema.ts	Aligns the Drizzle schema with managed MCP assignment, ownership, and external identity records.

Sequence Diagram

sequenceDiagram
  participant Admin as Workspace admin
  participant Invitee
  participant Enrollment as Enrollment API
  participant Provider as MCP OAuth provider
  participant DB as Managed connection store
  participant Runtime as Workflow runtime
  Admin->>Enrollment: Assign OAuth MCP server to Credential Group
  Invitee->>Enrollment: Start OAuth from invitation
  Enrollment->>Provider: Redirect with scoped authorization state
  Provider->>Enrollment: OAuth callback
  Enrollment->>DB: Store invitee-specific managed connection
  Runtime->>DB: Resolve connection under group workflow policy
  Runtime->>Provider: Execute MCP tool
  Provider-->>Runtime: Tool result

Loading

_{Reviews (3): Last reviewed commit: "fix(credential-groups): harden managed M..." | Re-trigger Greptile}

[cubic-dev-ai]

All reported issues were addressed across 75 files

<sub>Heads up: you’re close to your included review allowance. Set a flex budget so reviews don’t pause.

Re-trigger cubic</sub>

[TheodoreSpeaks]

@greptile

[TheodoreSpeaks]

@greptile