fix(19.7): RA-IN-03 document that the Redis session store needs a standalone Redis

reserveScript reads the record keys of the binding set's members, which it
cannot declare in KEYS, and its declared keys hash to different slots, so
Redis Cluster refuses it and a key-pattern ACL must allow the whole
<prefix>mcp: range. The script's comment, the pier README's
mcp.sessions.store row (which also no longer says the store opens on the
first request) and docs/services/mcp.md say so.
This commit is contained in:
2026-10-23 20:17:17 +02:00
parent 38e028fbe6
commit 58408aaa83
3 changed files with 7 additions and 2 deletions

View File

@@ -33,7 +33,7 @@ path: /mcp
| `mcp.enabled` | `false` | Mounts POST, GET and DELETE at `mcp.path`. |
| `mcp.path` | `/mcp` | The endpoint path. A route a plugin already registered there fails boot. |
| `mcp.allow_personal_tokens` | `false` | Also accepts personal API tokens (see Identity). |
| `mcp.sessions.store` | `memory` | `memory` for one instance, `redis` to share sessions and events across instances through `redis.url`. |
| `mcp.sessions.store` | `memory` | `memory` for one instance, `redis` to share sessions and events across instances through `redis.url` (a standalone Redis; Redis Cluster is not supported). |
| `mcp.sessions.idle_ttl` | `30m` | Sliding idle TTL of a session. |
| `mcp.sessions.max_per_binding` | `20` | Open sessions one client-and-user pair (or one personal token) may hold. |
| `mcp.resource` | `app.url` + `mcp.path` | The resource indicator; must equal the OAuth server's MCP resource. |