Expand SharePoint Embedded MCP server article: available tools, configuration, and SPA auth guidance - #10950
Conversation
…A auth guidance Incorporates PM review feedback on the merged getting-started article (PR SharePoint#10940): - Add an Available tools table grouped by task with representative tool names. - Add a Configuration section documenting CLI flags and environment variables. - Add brief per-client descriptions for VS Code and Claude Desktop. - Add an IMPORTANT callout that bring-your-own app registrations must register the React sample origin as a Single-page application (SPA) redirect URI (http://localhost:5173 + deployed origin) to avoid AADSTS9002326, plus the public-client http://localhost redirect.
|
Learn Build status updates of commit 00ea84d: ✅ Validation status: passed
For more details, please refer to the build report. |
PoliCheck Scan ReportThe following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 and severity-2 issues. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans. ✅ No issues foundMore information about PoliCheckInformation: PoliCheck | Severity Guidance | Term |
Remove the hardcoded sample-app port (http://localhost:5173), the http://localhost public-client redirect, the AADSTS9002326 error code, and the 'Allow public client flows' step from the pre-provisioned-app IMPORTANT callout. State the requirement conceptually (register the app's sign-in URL as a Single-page application redirect URI in Authentication to acquire a token) and defer the exact redirect URIs to the server README, so the Learn doc doesn't need edits when implementation details like the sample app port change.
|
Learn Build status updates of commit 697703b: ✅ Validation status: passed
For more details, please refer to the build report. |
PoliCheck Scan ReportThe following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 and severity-2 issues. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans. ✅ No issues foundMore information about PoliCheckInformation: PoliCheck | Severity Guidance | Term |
Andrew Connell (andrewconnell)
left a comment
There was a problem hiding this comment.
Please fix merge conflicts before updating we can review the doc.
Also, do not update the ms.date. This is set for the doc creeation time & then let the rendering engine use the file's git history to render the last updated date.
|
Gregory Joseph (@gnjoseph) bump... do you still want to make this change? waiting for you to address the edit issue & merge conflict before we can review & merge this |
|
Bump Gregory Joseph (@gnjoseph) - awaiting your feedback/fix for the merge conflict issues. Can't review until those are addressed. Will wait another week until this PR is closed due to no activity for a month. FYI Diego Luces (@dluces) Cindy Lay (@cindylay) for visibility as I'm not sure Gregory Joseph (@gnjoseph) is aware of @mentions here from previous PRs... |
Resolve the article move by preserving the current build-path article and metadata, then port the reviewed tools, operational configuration, and app-registration redirect guidance. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
PoliCheck Scan ReportThe following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 and severity-2 issues. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans. ✅ No issues foundMore information about PoliCheckInformation: PoliCheck | Severity Guidance | Term |
|
Learn Build status updates of commit f4445af: ✅ Validation status: passed
For more details, please refer to the build report. |
|
Andrew Connell (@andrewconnell) Thanks for the reminders. This is ready for re-review.
I also kept client/install UX out of this change so companion PR #10953 remains the owner of that surface. |
Summary
Expands the current SharePoint Embedded MCP server article at
docs/embedded/build/sharepoint-embedded-mcp-server.md.This follow-up preserves the reorganized documentation structure and later
editorial fixes from
main.What changed
grouped by provisioning, billing, app development, opt-in content operations,
container lifecycle, and documentation.
environment variables for app identity, tenant, read-only mode, tool profiles,
and per-instance data directories.
Conflict resolution
mainwithout rebasing or force-pushing.docs/embedded/getting-started/path deleted.docs/embedded/build/article.ms.date: 07/10/2026.Validation