feat(mcp): configurable auth_mechanism on McpConfig, shared shape with gateway (#11113)

Author: stainless-app[bot]

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 121
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/runloop-ai/runloop-ae0f5383aa4cb3defa2a011375d3524b89a9fed30e2ef6c8d225192a4ea8eb1f.yml
-openapi_spec_hash: a4f906d2af71050ead8673bad44a65d7
-config_hash: 25409d286d89763213d1155725bba77a
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/runloop-ai/runloop-2b4c651a27238a14ac7bd03ba582183d14f9622bdb5ea292c2cea97acc4c727e.yml
+openapi_spec_hash: 8a933236116d07c8a060b6eadd205feb
+config_hash: 7afcebea2dd638ed0cf0d5367f820f73

api.md

@@ -5,6 +5,7 @@ from runloop_api_client.types import (
     AfterIdle,
     AgentMount,
     AgentSource,
+    AuthMechanism,
     BrokerMount,
     CodeMountParameters,
     CustomHeader,

src/runloop_api_client/resources/gateway_configs.py

@@ -21,6 +21,7 @@
 from .._base_client import AsyncPaginator, make_request_options
 from ..types.gateway_config_view import GatewayConfigView
 from ..types.shared_params.custom_header import CustomHeader
+from ..types.shared_params.auth_mechanism import AuthMechanism
 
 __all__ = ["GatewayConfigsResource", "AsyncGatewayConfigsResource"]
 
@@ -48,7 +49,7 @@ def with_streaming_response(self) -> GatewayConfigsResourceWithStreamingResponse
     def create(
         self,
         *,
-        auth_mechanism: gateway_config_create_params.AuthMechanism,
+        auth_mechanism: AuthMechanism,
         endpoint: str,
         name: str,
         custom_headers: Optional[Iterable[CustomHeader]] | Omit = omit,
@@ -149,7 +150,7 @@ def update(
         self,
         id: str,
         *,
-        auth_mechanism: Optional[gateway_config_update_params.AuthMechanism] | Omit = omit,
+        auth_mechanism: Optional[AuthMechanism] | Omit = omit,
         custom_headers: Optional[Iterable[CustomHeader]] | Omit = omit,
         description: Optional[str] | Omit = omit,
         endpoint: Optional[str] | Omit = omit,
@@ -167,8 +168,8 @@ def update(
         All fields are optional.
 
         Args:
-          auth_mechanism: Defines how credentials are applied to HTTP requests when proxying through the
-              gateway.
+          auth_mechanism: Defines how the primary credential is applied to requests proxied to the
+              upstream.
 
           custom_headers: New list of additional headers. Replaces the existing list entirely; use an
               empty list to clear all custom headers. At most 8 entries.
@@ -343,7 +344,7 @@ def with_streaming_response(self) -> AsyncGatewayConfigsResourceWithStreamingRes
     async def create(
         self,
         *,
-        auth_mechanism: gateway_config_create_params.AuthMechanism,
+        auth_mechanism: AuthMechanism,
         endpoint: str,
         name: str,
         custom_headers: Optional[Iterable[CustomHeader]] | Omit = omit,
@@ -444,7 +445,7 @@ async def update(
         self,
         id: str,
         *,
-        auth_mechanism: Optional[gateway_config_update_params.AuthMechanism] | Omit = omit,
+        auth_mechanism: Optional[AuthMechanism] | Omit = omit,
         custom_headers: Optional[Iterable[CustomHeader]] | Omit = omit,
         description: Optional[str] | Omit = omit,
         endpoint: Optional[str] | Omit = omit,
@@ -462,8 +463,8 @@ async def update(
         All fields are optional.
 
         Args:
-          auth_mechanism: Defines how credentials are applied to HTTP requests when proxying through the
-              gateway.
+          auth_mechanism: Defines how the primary credential is applied to requests proxied to the
+              upstream.
 
           custom_headers: New list of additional headers. Replaces the existing list entirely; use an
               empty list to clear all custom headers. At most 8 entries.

src/runloop_api_client/resources/mcp_configs.py

@@ -21,6 +21,7 @@
 from .._base_client import AsyncPaginator, make_request_options
 from ..types.mcp_config_view import McpConfigView
 from ..types.shared_params.custom_header import CustomHeader
+from ..types.shared_params.auth_mechanism import AuthMechanism
 
 __all__ = ["McpConfigsResource", "AsyncMcpConfigsResource"]
 
@@ -51,6 +52,7 @@ def create(
         allowed_tools: SequenceNotStr[str],
         endpoint: str,
         name: str,
+        auth_mechanism: Optional[AuthMechanism] | Omit = omit,
         custom_headers: Optional[Iterable[CustomHeader]] | Omit = omit,
         description: Optional[str] | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
@@ -77,6 +79,9 @@ def create(
               The first segment before '-' is used as the service name for tool routing (e.g.,
               'github-readonly' uses 'github' as the service name).
 
+          auth_mechanism: Defines how the primary credential is applied to requests proxied to the
+              upstream.
+
           custom_headers: Additional headers applied to upstream requests after the credential. At most 8
               entries.
 
@@ -99,6 +104,7 @@ def create(
                     "allowed_tools": allowed_tools,
                     "endpoint": endpoint,
                     "name": name,
+                    "auth_mechanism": auth_mechanism,
                     "custom_headers": custom_headers,
                     "description": description,
                 },
@@ -152,6 +158,7 @@ def update(
         id: str,
         *,
         allowed_tools: Optional[SequenceNotStr[str]] | Omit = omit,
+        auth_mechanism: Optional[AuthMechanism] | Omit = omit,
         custom_headers: Optional[Iterable[CustomHeader]] | Omit = omit,
         description: Optional[str] | Omit = omit,
         endpoint: Optional[str] | Omit = omit,
@@ -172,6 +179,9 @@ def update(
           allowed_tools: New glob patterns specifying which tools are allowed. Examples: ['*'] for all
               tools, ['github.search_*'] for specific patterns.
 
+          auth_mechanism: Defines how the primary credential is applied to requests proxied to the
+              upstream.
+
           custom_headers: New list of additional headers. Replaces the existing list entirely; use an
               empty list to clear all custom headers. At most 8 entries.
 
@@ -198,6 +208,7 @@ def update(
             body=maybe_transform(
                 {
                     "allowed_tools": allowed_tools,
+                    "auth_mechanism": auth_mechanism,
                     "custom_headers": custom_headers,
                     "description": description,
                     "endpoint": endpoint,
@@ -347,6 +358,7 @@ async def create(
         allowed_tools: SequenceNotStr[str],
         endpoint: str,
         name: str,
+        auth_mechanism: Optional[AuthMechanism] | Omit = omit,
         custom_headers: Optional[Iterable[CustomHeader]] | Omit = omit,
         description: Optional[str] | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
@@ -373,6 +385,9 @@ async def create(
               The first segment before '-' is used as the service name for tool routing (e.g.,
               'github-readonly' uses 'github' as the service name).
 
+          auth_mechanism: Defines how the primary credential is applied to requests proxied to the
+              upstream.
+
           custom_headers: Additional headers applied to upstream requests after the credential. At most 8
               entries.
 
@@ -395,6 +410,7 @@ async def create(
                     "allowed_tools": allowed_tools,
                     "endpoint": endpoint,
                     "name": name,
+                    "auth_mechanism": auth_mechanism,
                     "custom_headers": custom_headers,
                     "description": description,
                 },
@@ -448,6 +464,7 @@ async def update(
         id: str,
         *,
         allowed_tools: Optional[SequenceNotStr[str]] | Omit = omit,
+        auth_mechanism: Optional[AuthMechanism] | Omit = omit,
         custom_headers: Optional[Iterable[CustomHeader]] | Omit = omit,
         description: Optional[str] | Omit = omit,
         endpoint: Optional[str] | Omit = omit,
@@ -468,6 +485,9 @@ async def update(
           allowed_tools: New glob patterns specifying which tools are allowed. Examples: ['*'] for all
               tools, ['github.search_*'] for specific patterns.
 
+          auth_mechanism: Defines how the primary credential is applied to requests proxied to the
+              upstream.
+
           custom_headers: New list of additional headers. Replaces the existing list entirely; use an
               empty list to clear all custom headers. At most 8 entries.
 
@@ -494,6 +514,7 @@ async def update(
             body=await async_maybe_transform(
                 {
                     "allowed_tools": allowed_tools,
+                    "auth_mechanism": auth_mechanism,
                     "custom_headers": custom_headers,
                     "description": description,
                     "endpoint": endpoint,

src/runloop_api_client/types/__init__.py

@@ -11,6 +11,7 @@
     BrokerMount as BrokerMount,
     ObjectMount as ObjectMount,
     CustomHeader as CustomHeader,
+    AuthMechanism as AuthMechanism,
     LifecycleHooks as LifecycleHooks,
     ResumeTriggers as ResumeTriggers,
     LaunchParameters as LaunchParameters,

src/runloop_api_client/types/gateway_config_create_params.py

@@ -6,8 +6,9 @@
 from typing_extensions import Required, TypedDict
 
 from .shared_params.custom_header import CustomHeader
+from .shared_params.auth_mechanism import AuthMechanism
 
-__all__ = ["GatewayConfigCreateParams", "AuthMechanism"]
+__all__ = ["GatewayConfigCreateParams"]
 
 
 class GatewayConfigCreateParams(TypedDict, total=False):
@@ -34,20 +35,3 @@ class GatewayConfigCreateParams(TypedDict, total=False):
 
     description: Optional[str]
     """Optional description for this gateway configuration."""
-
-
-class AuthMechanism(TypedDict, total=False):
-    """How credentials should be applied to proxied requests.
-
-    Specify the type ('header', 'bearer') and optional key field.
-    """
-
-    type: Required[str]
-    """The type of authentication mechanism: 'header', 'bearer', or 'basic'.
-
-    For 'basic', store the secret as plain 'user:pass'; the gateway base64-encodes
-    it.
-    """
-
-    key: Optional[str]
-    """Only valid for 'header' type: the header name (e.g., 'x-api-key')."""

src/runloop_api_client/types/gateway_config_update_params.py

@@ -3,18 +3,19 @@
 from __future__ import annotations
 
 from typing import Iterable, Optional
-from typing_extensions import Required, TypedDict
+from typing_extensions import TypedDict
 
 from .shared_params.custom_header import CustomHeader
+from .shared_params.auth_mechanism import AuthMechanism
 
-__all__ = ["GatewayConfigUpdateParams", "AuthMechanism"]
+__all__ = ["GatewayConfigUpdateParams"]
 
 
 class GatewayConfigUpdateParams(TypedDict, total=False):
     auth_mechanism: Optional[AuthMechanism]
     """
-    Defines how credentials are applied to HTTP requests when proxying through the
-    gateway.
+    Defines how the primary credential is applied to requests proxied to the
+    upstream.
     """
 
     custom_headers: Optional[Iterable[CustomHeader]]
@@ -32,19 +33,3 @@ class GatewayConfigUpdateParams(TypedDict, total=False):
 
     name: Optional[str]
     """New name for the GatewayConfig. Must be unique within your account."""
-
-
-class AuthMechanism(TypedDict, total=False):
-    """
-    Defines how credentials are applied to HTTP requests when proxying through the gateway.
-    """
-
-    type: Required[str]
-    """The type of authentication mechanism: 'header', 'bearer', or 'basic'.
-
-    For 'basic', store the secret as plain 'user:pass'; the gateway base64-encodes
-    it.
-    """
-
-    key: Optional[str]
-    """Only valid for 'header' type: the header name (e.g., 'x-api-key')."""

src/runloop_api_client/types/gateway_config_view.py

@@ -4,22 +4,9 @@
 
 from .._models import BaseModel
 from .shared.custom_header import CustomHeader
+from .shared.auth_mechanism import AuthMechanism
 
-__all__ = ["GatewayConfigView", "AuthMechanism"]
-
-
-class AuthMechanism(BaseModel):
-    """How credentials should be applied to proxied requests."""
-
-    type: str
-    """The type of authentication mechanism: 'header', 'bearer', or 'basic'.
-
-    For 'basic', store the secret as plain 'user:pass'; the gateway base64-encodes
-    it.
-    """
-
-    key: Optional[str] = None
-    """Only valid for 'header' type: the header name (e.g., 'x-api-key')."""
+__all__ = ["GatewayConfigView"]
 
 
 class GatewayConfigView(BaseModel):

src/runloop_api_client/types/mcp_config_create_params.py

@@ -7,6 +7,7 @@
 
 from .._types import SequenceNotStr
 from .shared_params.custom_header import CustomHeader
+from .shared_params.auth_mechanism import AuthMechanism
 
 __all__ = ["McpConfigCreateParams"]
 
@@ -30,6 +31,12 @@ class McpConfigCreateParams(TypedDict, total=False):
     service name).
     """
 
+    auth_mechanism: Optional[AuthMechanism]
+    """
+    Defines how the primary credential is applied to requests proxied to the
+    upstream.
+    """
+
     custom_headers: Optional[Iterable[CustomHeader]]
     """Additional headers applied to upstream requests after the credential.
 

src/runloop_api_client/types/mcp_config_update_params.py

@@ -7,6 +7,7 @@
 
 from .._types import SequenceNotStr
 from .shared_params.custom_header import CustomHeader
+from .shared_params.auth_mechanism import AuthMechanism
 
 __all__ = ["McpConfigUpdateParams"]
 
@@ -18,6 +19,12 @@ class McpConfigUpdateParams(TypedDict, total=False):
     Examples: ['*'] for all tools, ['github.search_*'] for specific patterns.
     """
 
+    auth_mechanism: Optional[AuthMechanism]
+    """
+    Defines how the primary credential is applied to requests proxied to the
+    upstream.
+    """
+
     custom_headers: Optional[Iterable[CustomHeader]]
     """New list of additional headers.