Endpoints

The server exposes these endpoints:

• /mcp (MCP)
• /healthz (health)
• /readyz (readiness: 503 while the server drains on shutdown or its database is unavailable or behind)
• /.well-known/*
• /register, /authorize, /token, /revoke (OAuth)
• /oauth/microsoft/* and /oauth/google/* (provider sign-in)
• /push/microsoft, /push/microsoft/lifecycle and /push/google (new-mail notifications from Microsoft Graph and Google Pub/Sub)

postkeep healthcheck probes /healthz for container health checks.

Redirect URIs used when the operator enables provider sign-in:

• Microsoft: {PUBLIC_URL}/oauth/microsoft/callback
• Google: {PUBLIC_URL}/oauth/google/callback
• Gmail push: {PUBLIC_URL}/push/google