Accounts and sign-in 0.10.0
- The hosted MCP server at /mcp: agents that run in the cloud connect with Sign in with Alelyon and get alelyon-cli's Pages tools, limited to what the person allowed and labeled with the agent's name. Its protected-resource metadata (RFC 9728) tells a client where to sign in; a client that names the server and asks for nothing is given reading, posting and interacting.
- Sign in with Alelyon signs an ID token (RS256) for apps that ask for openid, with a key kept in Secret Manager and its public half at /.well-known/jwks.json.
- deploy the identity service at the version's commit, after a data-disk snapshot; no setting changes.