Finding / omnigent

2026-10-13-omnigent-a-managed-mcp-registry-and-gateway-prototype-lands-on-main-with-separate-policy-and-creden

A managed MCP registry and gateway prototype lands on main with separate policy and credential actors. An opt-in main-only prototype adds an admin-configured MCP registry, encrypted server-held grants, per-session service selections and a gateway. The adapter authenticates the caller and requires Edit access; a session header supplies context, not authentication. Verified runner calls separate the policy actor from the credential owner, so an editor-triggered turn can use the owner’s connection subject to the actor’s policies. Direct calls use the caller for both. Queued multi-editor turn attribution remains a documented limitation. A same-evening follow-up lets users remove saved selections and launch without MCP services during registry outages.

Channel: main-unreleased. Half: both. Date: 2026-10-13T22:29:44Z merged; follow-up 23:13:40Z.

Operator consequence: Wait for a containing stable release for ordinary deployment. A prototype trial needs the same compatible commit on server and execution hosts, explicit registry configuration and a review of whose account each actor uses. Examine shared-session attribution and result-review limits; moving credentials to the server does not remove the need to authorize their use.

Receipt

Finding metadata

Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0

Finding ID: 2026-10-13-omnigent-a-managed-mcp-registry-and-gateway-prototype-lands-on-main-with-separate-policy-and-creden

Profile citations

  • omnigent / claim / managed-mcp-main-only

Source links

Primary links, including exact changelog lines when available.