@@ -65,13 +130,18 @@
diff --git a/frontend/src/components/TopHeader.vue b/frontend/src/components/TopHeader.vue
index 3258a1d9..8b7409c2 100644
--- a/frontend/src/components/TopHeader.vue
+++ b/frontend/src/components/TopHeader.vue
@@ -38,7 +38,7 @@
-
Add Server
+
{{ addServerLabel }}
@@ -95,11 +95,15 @@ import { ref, computed } from 'vue'
import { useRouter } from 'vue-router'
import { useSystemStore } from '@/stores/system'
import { useServersStore } from '@/stores/servers'
+import { useAuthStore } from '@/stores/auth'
import AddServerModal from './AddServerModal.vue'
const router = useRouter()
const systemStore = useSystemStore()
const serversStore = useServersStore()
+const authStore = useAuthStore()
+
+const addServerLabel = computed(() => authStore.isTeamsEdition ? 'Add Personal Server' : 'Add Server')
const searchQuery = ref('')
const copyTooltip = ref('Copy MCP address')
diff --git a/frontend/src/router/index.ts b/frontend/src/router/index.ts
index 98abf576..7ec75920 100644
--- a/frontend/src/router/index.ts
+++ b/frontend/src/router/index.ts
@@ -4,6 +4,14 @@ import Dashboard from '@/views/Dashboard.vue'
const router = createRouter({
history: createWebHistory(import.meta.env.BASE_URL),
routes: [
+ // Teams auth routes
+ {
+ path: '/login',
+ name: 'login',
+ component: () => import('@/views/teams/Login.vue'),
+ meta: { title: 'Sign In', public: true },
+ },
+ // Existing routes (admin/personal)
{
path: '/',
name: 'dashboard',
@@ -85,6 +93,51 @@ const router = createRouter({
title: 'Agent Tokens',
},
},
+ // Teams user routes
+ {
+ path: '/my/servers',
+ name: 'user-servers',
+ component: () => import('@/views/teams/UserServers.vue'),
+ meta: { title: 'My Servers', requiresAuth: true },
+ },
+ {
+ path: '/my/activity',
+ name: 'user-activity',
+ component: () => import('@/views/teams/UserActivity.vue'),
+ meta: { title: 'My Activity', requiresAuth: true },
+ },
+ {
+ path: '/my/diagnostics',
+ name: 'user-diagnostics',
+ component: () => import('@/views/teams/UserDiagnostics.vue'),
+ meta: { title: 'Diagnostics', requiresAuth: true },
+ },
+ {
+ path: '/my/tokens',
+ name: 'user-tokens',
+ component: () => import('@/views/teams/UserTokens.vue'),
+ meta: { title: 'Agent Tokens', requiresAuth: true },
+ },
+ // Teams admin routes
+ {
+ path: '/admin/dashboard',
+ name: 'admin-dashboard',
+ component: () => import('@/views/teams/AdminDashboard.vue'),
+ meta: { title: 'Admin Dashboard', requiresAuth: true, requiresAdmin: true },
+ },
+ {
+ path: '/admin/users',
+ name: 'admin-users',
+ component: () => import('@/views/teams/AdminUsers.vue'),
+ meta: { title: 'Users', requiresAuth: true, requiresAdmin: true },
+ },
+ {
+ path: '/admin/servers',
+ name: 'admin-servers',
+ component: () => import('@/views/teams/AdminServers.vue'),
+ meta: { title: 'Servers', requiresAuth: true, requiresAdmin: true },
+ },
+ // 404 - keep at end
{
path: '/:pathMatch(.*)*',
name: 'not-found',
@@ -96,12 +149,53 @@ const router = createRouter({
],
})
-// Update document title based on route
-router.beforeEach((to) => {
+// Auth guard
+router.beforeEach(async (to) => {
+ const { useAuthStore } = await import('@/stores/auth')
+ const authStore = useAuthStore()
+
+ // Initialize auth state on first navigation
+ if (authStore.loading) {
+ await authStore.checkAuth()
+ }
+
+ // Skip auth checks for personal edition
+ if (!authStore.isTeamsEdition) {
+ // Don't show teams routes in personal edition
+ if (to.path === '/login' || to.path.startsWith('/my/') || to.path.startsWith('/admin/')) {
+ return { name: 'dashboard' }
+ }
+ // Update title for personal edition
+ const title = to.meta.title as string
+ if (title) {
+ document.title = `${title} - MCPProxy Control Panel`
+ }
+ return
+ }
+
+ // Public routes (login) - redirect to dashboard if already authenticated
+ if (to.meta.public) {
+ if (authStore.isAuthenticated) {
+ return { name: 'dashboard' }
+ }
+ return
+ }
+
+ // Require authentication for teams edition
+ if (!authStore.isAuthenticated) {
+ return { name: 'login' }
+ }
+
+ // Admin-only routes
+ if (to.meta.requiresAdmin && !authStore.isAdmin) {
+ return { name: 'dashboard' }
+ }
+
+ // Update title
const title = to.meta.title as string
if (title) {
document.title = `${title} - MCPProxy Control Panel`
}
})
-export default router
\ No newline at end of file
+export default router
diff --git a/frontend/src/services/api.ts b/frontend/src/services/api.ts
index 60cdd591..e2318473 100644
--- a/frontend/src/services/api.ts
+++ b/frontend/src/services/api.ts
@@ -204,6 +204,11 @@ class APIService {
}
}
+ // Status endpoint
+ async getStatus(): Promise
> {
+ return this.request<{ edition: string; running: boolean }>('/api/v1/status')
+ }
+
// Server endpoints
async getServers(): Promise> {
return this.request<{ servers: Server[] }>('/api/v1/servers')
@@ -658,6 +663,47 @@ class APIService {
})
}
+ // Admin server management (Teams)
+ async adminEnableServer(name: string): Promise> {
+ return this.request(`/api/v1/admin/servers/${encodeURIComponent(name)}/enable`, { method: 'POST', credentials: 'include' } as RequestInit)
+ }
+
+ async adminDisableServer(name: string): Promise> {
+ return this.request(`/api/v1/admin/servers/${encodeURIComponent(name)}/disable`, { method: 'POST', credentials: 'include' } as RequestInit)
+ }
+
+ async adminRestartServer(name: string): Promise> {
+ return this.request(`/api/v1/admin/servers/${encodeURIComponent(name)}/restart`, { method: 'POST', credentials: 'include' } as RequestInit)
+ }
+
+ // User tokens (Teams)
+ async listUserTokens(): Promise> {
+ return this.request<{ tokens: AgentTokenInfo[] }>('/api/v1/user/tokens', { credentials: 'include' } as RequestInit)
+ }
+
+ async createUserToken(data: CreateAgentTokenRequest): Promise> {
+ return this.request('/api/v1/user/tokens', {
+ method: 'POST',
+ body: JSON.stringify(data),
+ headers: { 'Content-Type': 'application/json' },
+ credentials: 'include',
+ } as RequestInit)
+ }
+
+ async revokeUserToken(name: string): Promise> {
+ return this.request(`/api/v1/user/tokens/${encodeURIComponent(name)}`, {
+ method: 'DELETE',
+ credentials: 'include',
+ } as RequestInit)
+ }
+
+ async regenerateUserToken(name: string): Promise> {
+ return this.request<{ name: string; token: string }>(`/api/v1/user/tokens/${encodeURIComponent(name)}/regenerate`, {
+ method: 'POST',
+ credentials: 'include',
+ } as RequestInit)
+ }
+
// Utility methods
async testConnection(): Promise {
try {
@@ -684,4 +730,4 @@ export interface CanonicalConfigPathsResponse {
paths: CanonicalConfigPath[]
}
-export default new APIService()
\ No newline at end of file
+export default new APIService()
diff --git a/frontend/src/services/auth-api.ts b/frontend/src/services/auth-api.ts
new file mode 100644
index 00000000..9e22069d
--- /dev/null
+++ b/frontend/src/services/auth-api.ts
@@ -0,0 +1,56 @@
+// Auth API client for teams edition
+const API_BASE = '/api/v1'
+
+export interface UserProfile {
+ id: string
+ email: string
+ display_name: string
+ role: 'admin' | 'user'
+ provider: string
+ created_at: string
+ last_login_at: string
+}
+
+export interface BearerTokenResponse {
+ token: string
+ expires_at: string
+}
+
+export const authApi = {
+ // Get current user profile (returns null if not authenticated)
+ async getMe(): Promise {
+ try {
+ const response = await fetch(`${API_BASE}/auth/me`, { credentials: 'include' })
+ if (response.status === 401) return null
+ if (!response.ok) throw new Error(`HTTP ${response.status}`)
+ return await response.json()
+ } catch {
+ return null
+ }
+ },
+
+ // Generate bearer token for MCP clients
+ async generateToken(): Promise {
+ const response = await fetch(`${API_BASE}/auth/token`, {
+ method: 'POST',
+ credentials: 'include',
+ })
+ if (!response.ok) throw new Error(`HTTP ${response.status}`)
+ return await response.json()
+ },
+
+ // Log out
+ async logout(): Promise {
+ await fetch(`${API_BASE}/auth/logout`, {
+ method: 'POST',
+ credentials: 'include',
+ })
+ },
+
+ // Get login URL
+ getLoginUrl(redirectUri?: string): string {
+ const params = new URLSearchParams()
+ if (redirectUri) params.set('redirect_uri', redirectUri)
+ return `${API_BASE}/auth/login${params.toString() ? '?' + params.toString() : ''}`
+ },
+}
diff --git a/frontend/src/stores/auth.ts b/frontend/src/stores/auth.ts
new file mode 100644
index 00000000..6e25b1d0
--- /dev/null
+++ b/frontend/src/stores/auth.ts
@@ -0,0 +1,53 @@
+import { defineStore } from 'pinia'
+import { ref, computed } from 'vue'
+import { authApi, type UserProfile } from '@/services/auth-api'
+import api from '@/services/api'
+
+export const useAuthStore = defineStore('auth', () => {
+ const user = ref(null)
+ const loading = ref(true)
+ const isTeamsEdition = ref(false)
+
+ const isAuthenticated = computed(() => !!user.value)
+ const isAdmin = computed(() => user.value?.role === 'admin')
+ const displayName = computed(() => user.value?.display_name || user.value?.email || '')
+
+ async function checkAuth() {
+ loading.value = true
+ try {
+ // Check if this is teams edition using the API service (includes API key)
+ const statusRes = await api.getStatus()
+ isTeamsEdition.value = statusRes.data?.edition === 'teams'
+
+ if (isTeamsEdition.value) {
+ user.value = await authApi.getMe()
+ }
+ } catch {
+ // Not authenticated or not teams edition
+ user.value = null
+ } finally {
+ loading.value = false
+ }
+ }
+
+ async function logout() {
+ await authApi.logout()
+ user.value = null
+ }
+
+ function login() {
+ window.location.href = authApi.getLoginUrl(window.location.pathname)
+ }
+
+ return {
+ user,
+ loading,
+ isTeamsEdition,
+ isAuthenticated,
+ isAdmin,
+ displayName,
+ checkAuth,
+ logout,
+ login,
+ }
+})
diff --git a/frontend/src/views/teams/AdminDashboard.vue b/frontend/src/views/teams/AdminDashboard.vue
new file mode 100644
index 00000000..80e7a163
--- /dev/null
+++ b/frontend/src/views/teams/AdminDashboard.vue
@@ -0,0 +1,225 @@
+
+
+
+
+
+
Admin Dashboard
+
Team overview and system health
+
+
+
+
+
+
+
+
+
Total Users
+
{{ stats.totalUsers }}
+
{{ stats.activeUsers }} active
+
+
+
+
+
Active Sessions
+
{{ stats.activeSessions }}
+
Current connections
+
+
+
+
+
Total Servers
+
{{ stats.totalServers }}
+
{{ stats.healthyServers }} healthy
+
+
+
+
+
Tool Calls (24h)
+
{{ stats.toolCalls24h }}
+
{{ stats.errorRate24h }}% error rate
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
Recent Users
+ View All
+
+
+ No users yet
+
+
+
+
+
{{ user.display_name || user.email }}
+
{{ user.email }}
+
+
+
+ {{ user.role }}
+
+
+ {{ user.last_login_at ? formatRelativeTime(user.last_login_at) : 'Never' }}
+
+
+
+
+
+
+
+
+
+
+
+
Recent Activity
+ View All
+
+
+ No recent activity
+
+
+
+
+
+ {{ activity.tool_name || activity.type }}
+ on {{ activity.server_name }}
+
+
{{ activity.user_email || 'system' }}
+
+
+
+ {{ activity.status }}
+
+ {{ formatRelativeTime(activity.timestamp) }}
+
+
+
+
+
+
+
+
+
+
Server Management
+
Manage upstream MCP servers. Shared servers are available to all team members.
+
+
+
+
+
+
+
Total
+
{{ servers.length }}
+
+
+
Connected
+
{{ connectedCount }}
+
+
+
Shared
+
{{ sharedCount }}
+
+
+
Disabled
+
{{ disabledCount }}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ No servers configured. Add servers in the configuration file.
+
+
+
+
+
+
+
+ | Server |
+ Protocol |
+ Endpoint |
+ Status |
+ Sharing |
+ Actions |
+
+
+
+
+ |
+ {{ server.name }}
+ |
+
+ {{ server.protocol }}
+ |
+
+ {{ server.url || server.command || '\u2014' }}
+ |
+
+
+ {{ statusLabel(server) }}
+
+ |
+
+ shared
+ private
+ |
+
+
+ |
+
+
+
+
+
+
+
+ {{ error }}
+
+
+
+
+
+
+
+
+
+
Users
+
Manage team members and their access
+
+
+
+
+
+
+
+
Total Users
+
{{ users.length }}
+
+
+
Active
+
{{ activeCount }}
+
+
+
Disabled
+
{{ disabledCount }}
+
+
+
+
+
+
+
+
+
+
+
+
{{ error }}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ | User |
+ Provider |
+ Last Login |
+ Status |
+ Actions |
+
+
+
+
+
+
+ {{ user.display_name || '-' }}
+ {{ user.email }}
+ |
+
+ {{ user.provider }}
+ |
+
+
+ {{ formatRelativeTime(user.last_login_at) }}
+
+ Never
+ |
+
+
+ {{ user.disabled ? 'Disabled' : 'Active' }}
+
+ |
+
+
+
+
+ Activity
+
+
+ |
+
+
+
+
+
+
+ No users match "{{ searchQuery }}"
+
+
+
+
+
+ {{ actionError }}
+
+
+
+
+
+
MCPProxy Teams
+
Sign in to access your MCP tools
+
+
+
+ Powered by MCPProxy
+
+
+
+
+
+
+
+
My Activity
+
Tool calls and activity for your sessions
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
{{ error }}
+
+
+
+
+
+
+
No activity yet
+
Activity will appear here once you start using tools
+
+
+
+
+
+
+
+
+ | Time |
+ Tool |
+ Server |
+ Status |
+ Duration |
+
+
+
+
+ |
+
+ {{ formatRelativeTime(activity.timestamp) }}
+
+ |
+
+ {{ activity.tool_name || activity.type }}
+ |
+
+ {{ activity.server_name || '-' }}
+ |
+
+
+ {{ activity.status }}
+
+ |
+
+
+ {{ activity.duration_ms ? `${activity.duration_ms}ms` : '-' }}
+
+ |
+
+
+
+
+
+
+
+
+ Showing {{ activities.length }} of {{ totalCount }} activities
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
Diagnostics
+
Server health for your accessible MCP servers
+
+
+
+
+
+
+
+
Total Servers
+
{{ servers.length }}
+
+
+
Healthy
+
{{ healthyCounts.healthy }}
+
+
+
Degraded
+
{{ healthyCounts.degraded }}
+
+
+
Unhealthy
+
{{ healthyCounts.unhealthy }}
+
+
+
+
+
+
+
+
+
+
+
+
{{ error }}
+
+
+
+
+
+
No servers found
+
You don't have any accessible servers yet
+
+
+
+
+
+
+
+
{{ server.name }}
+
+ {{ server.owner_type }}
+
+
+
+
+
+
+
+ {{ capitalize(server.health_level) }}
+
+
+
+
+
+ {{ server.health_summary }}
+
+
+
+
+ {{ server.protocol }}
+ connected
+ disconnected
+ {{ server.tool_count }} tools
+
+
+
+
+ {{ server.health_detail }}
+
+
+
+
+
+
+
+
+
+
My Servers
+
+
+
+
+
+
Personal Servers
+
+
+
+
+ No personal servers yet. Click "Add Personal Server" to get started.
+
+
+
+
+
+ | Server |
+ Protocol |
+ Endpoint |
+ Status |
+ Tools |
+ Actions |
+
+
+
+
+ | {{ server.name }} |
+
+ {{ server.protocol }}
+ |
+
+ {{ server.url || server.command || '\u2014' }}
+ |
+
+
+ {{ healthLabel(server) }}
+
+ |
+
+ {{ server.tool_count != null ? server.tool_count : '\u2014' }}
+ |
+
+
+ |
+
+
+
+
+
+
+
+
+
Shared Servers
+
+
+
No shared servers available.
+
Your administrator can share servers from the Server Management page.
+
+
+
+
+
+ | Server |
+ Protocol |
+ Endpoint |
+ Status |
+ Tools |
+ Actions |
+
+
+
+
+ |
+ {{ server.name }}
+ shared
+ |
+
+ {{ server.protocol }}
+ |
+
+ {{ server.url || server.command || '\u2014' }}
+ |
+
+
+ {{ isSharedDisabled(server) ? 'disabled by you' : healthLabel(server) }}
+
+ |
+
+ {{ server.tool_count != null ? server.tool_count : '\u2014' }}
+ |
+
+
+ |
+
+
+
+
+
+
+
+
+
+
{{ error }}
+
+
+
+
+
+
+
+
+
+
+
+
+
Agent Tokens
+
Create tokens for AI agents to act on your behalf
+
+
+
+
+
+
+
+
+
+
+
Total Tokens
+
{{ tokens.length }}
+
+
+
Active
+
{{ activeCount }}
+
+
+
Expired / Revoked
+
{{ expiredOrRevokedCount }}
+
+
+
+
+
+
+
+
Save this token now!
+
This token cannot be retrieved again after you dismiss this message.
+
+ {{ newTokenSecret }}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
Failed to load tokens
+
{{ error }}
+
+
+
+
+
+
+
+
No agent tokens yet
+
Create scoped tokens for your AI agents and automated workflows.
+
+
+
+
+
+
+
+
+ | Name |
+ Prefix |
+ Servers |
+ Permissions |
+ Expires |
+ Last Used |
+ Status |
+ Actions |
+
+
+
+
+ | {{ token.name }} |
+
+ {{ token.token_prefix }}
+ |
+
+
+
+ {{ server }}
+
+
+ |
+
+
+
+ {{ perm }}
+
+
+ |
+
+
+ {{ formatDate(token.expires_at) }}
+
+ |
+
+ {{ formatDate(token.last_used_at) }}
+ Never
+ |
+
+ Revoked
+ Expired
+ Active
+ |
+
+
+ |
+
+
+
+
+
+
+
+
- MCPProxy
+