From 13be45cb4bd347edfe74ac8969e7fc5c60b0ecba Mon Sep 17 00:00:00 2001 From: benjdlambert Date: Tue, 17 Jun 2025 14:01:48 +0200 Subject: [PATCH] chore: added a note about device auth Signed-off-by: benjdlambert --- plugins/mcp-actions-backend/README.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/plugins/mcp-actions-backend/README.md b/plugins/mcp-actions-backend/README.md index 31b6d51ecb..b14f252bce 100644 --- a/plugins/mcp-actions-backend/README.md +++ b/plugins/mcp-actions-backend/README.md @@ -75,10 +75,11 @@ export const myPlugin = createBackendPlugin({ By default, the Backstage backend requires authentication for all requests. -We're looking at [device authentication](https://github.com/backstage/backstage/pull/27680) to make this much easier with authentication for MCP clients, but in the meantime you can take advantage of the [static tokens](https://backstage.io/docs/auth/service-to-service-auth/#static-tokens) feature. - #### External Access with Static Tokens +> This is meant to be a temporary workaround until work on [device authentication](https://github.com/backstage/backstage/pull/27680) is completed. +> This will make authentication for MCP clients and CLI's in Backstage easier than having to configure static tokens. + Configure external access with static tokens in your app configuration: ```yaml