Customize hub and MCP servers

(1).

(the browser is on /mcp, where the URL wait would pass at once),

is page.

shows the MCP Servers row highlighted.

(the same five lines as the desktop aside);

is Customize, and

is 0.

has insideViewport true and pageHorizontalOverflow false;

shows the header, toolbar and one column of cards.

is 1.

(820 px) keeps it on /customize; run

(both false),

(520 px wide, pageHorizontalOverflow false) and

is true and

is 0.

is false below 1024 px and true from 1024 px (the switch is exactly 1023 → 1024),

is true,

is wider than 150 px (622, 323, 375, 578, 257 and 673 today) and

has pageHorizontalOverflow false with equal scrollWidth and clientWidth (main is full width at 767 px, W − 300 beside the rail from 768 to 1023 px, W − 640 beside the rail and the aside from 1024 px).

(No MCP servers installed yet. and Pick one from the marketplace below to get started.) and

(55 today; the catalog ships with @openhands/extensions).

is ["Model Context Protocol (MCP)","Installed","Library"].

shows pageErrors 0.

(1, mcp-marketplace-card-time).

is No matches for your search. (the installed list's search needs installed cards: it is driven at the end of F17.install-stdio).

is "" and the card count is back to 55.

(button "Filter MCP servers" [expanded]: All and menu "Filter MCP servers" with All [checked], Installed, Library) and

is 0 and

is Installed.

(Time, its description, View documentation →, Command, Cancel, Install) and

(uvx mcp-server-time; browser enabled is false).

is 0.

(count 1),

(count 0).

is https://mcp.stripe.com/ and browser enabled on it is false.

is Please fill out this field. and no request is sent.

is password and

shows dots.

(browser value 'testid=mcp-install-field-command-readonly' is uvx mcp-server-fetch) and

is Connection failed: McpError: Connection closed and the modal stays open (<run>/private/stack.log shows UnknownIssuer).

is still 1 (no fetch card).

is Time, STDIO, Timezone-aware current time, conversions, and timestamp formatting., uvx mcp-server-time, Not checked yet, Test connection; its data-server-id is time.

is time_1, STDIO, Timezone-aware current time, conversions, and timestamp formatting., uvx mcp-server-time, Not checked yet, Test connection (the title is the settings key because it differs from the catalog id), and

is ["time:Time","time_1:Time"] (both badges come from the Time entry).

shows both cards with the description.

shows the read-only Command npx -y @modelcontextprotocol/server-filesystem, a Paths (space separated) field and Each whitespace-separated token is appended as its own argument.;

is _blank (View documentation →, rel noreferrer).

is Please fill out this field. and browser network records no request.

(Install, Verifying…, Saving..., <absent>).

has args ["-y","@modelcontextprotocol/server-filesystem","<…>/qa-fs-a","<…>/qa-fs-b"].

is password,

is true, and

is MCP credentials aren't shared with automations. Save as a secret to make this value available to automations. Run

is 1.

(Save as secret ends on /settings/secrets),

(Test connection, Verifying…, Test connection), the same wait and

is qa_time (the id in the per-card test ids below) and its aria-label is Edit qa_time.

is Connected — 13 tool(s) available.

is qa_shttp, HTTP, http://127.0.0.1:38417/mcp, Not checked yet, Test connection;

has transport http and auth {"strategy":"bearer","value":"**********"}.

is **********; Escape.

is healthy-connectivity, and the click did not open the editor (browser count 'testid=mcp-custom-editor' is 0).

(a click on the card's centre lands on its health row and opens nothing: see Gotchas),

(Are you sure you want to delete this server?, Cancel, Confirm).

(MCP server removed.).

is 0, and

has no qa_broken.

(the detail line opens the editor on every card; a plain click on the card's centre happens to open it on qa_time, whose Time description fills the centre, but not on a card without a description; keyboard: browser focus '[data-server-id=qa_time]' then browser press Enter) and

is UV_NATIVE_TLS=**********.

(bash ANSI-C quoting for the newlines), click testid=edit-mcp-server-form >> testid=mcp-test-connection (still Connected — 2 tool(s) available: the stored env value is reused), then

is uvx mcp-server-time --local-timezone UTC.

is Connected — 1 tool(s) available.

lists one POST /api/mcp/test (200) whose body is {"server":{"type":"stdio","command":"/bin/sh","args":["-c","test \"$QA_VAULT_TOKEN\" = qa-vault-secret-000 && exec \"$QA_NODE\" \"$QA_SERVER\""],"env":{"QA_VAULT_TOKEN":"<redacted 19 chars>","QA_NODE":"<redacted 40 chars>","QA_SERVER":"<redacted 142 chars>"}},"name":"qa_vault"}: the command and args in clear, each env value replaced by the CLI with the length of the real value (19 for qa-vault-secret-000; 40 and 142 are <node> and <server.mjs> on this machine, ${#var} in a shell).

has env {"QA_VAULT_TOKEN":"**********","QA_NODE":"**********","QA_SERVER":"**********"} (every env value is redacted; the page reads this same endpoint, there is no GET /api/settings/mcp).

is the three lines QA_VAULT_TOKEN=**********, QA_NODE=**********, QA_SERVER=**********.

is Connected — 1 tool(s) available, which the shell gate only allows when the stored token, binary and path were sent (control-openhands browser screenshot 'testid=mcp-custom-editor' --feature F17.stored-secret-reuse --name masked-test-ok).

shows why: a GET /api/settings (and /server_info) right before the POST.

(Save Server, Save Server [disabled], <absent>) and

lists one PATCH /api/settings/mcp/qa_vault (200) whose body is {"transport":"stdio","command":"/bin/sh","args":["-c","test \"$QA_VAULT_TOKEN\" = qa-vault-secret-000 && exec \"$QA_NODE\" \"$QA_SERVER\"","qa-v2"]}: a sparse patch with no env key at all (untouched secrets are left out, so the server keeps its stored values; neither the placeholder nor an encrypted value travels).

is still {"QA_VAULT_TOKEN":"**********","QA_NODE":"**********","QA_SERVER":"**********"},

(the env is the three placeholders), run

is Connected — 1 tool(s) available again, which the gate only allows if the Save kept the real token, binary and path rather than storing the placeholder text (--name saved-with-placeholders), and the --bodies row carries qa-v2 in args with the three encrypted lengths (120, 140, 268) in env.

has total 1, a POST /api/settings/mcp/qa_docs with status 201, and

has total 0.

is unchanged from the end of the previous bullet (command /bin/sh, args still ending with qa-v2, the three ********** env values, enabled true), and after

(Install, Verifying…, Install) and

shows one POST /api/mcp/test and no /api/settings/mcp write,

has no value and

lists no GITHUB_PERSONAL_ACCESS_TOKEN (control-openhands browser screenshot 'testid=mcp-install-modal' --feature F17.credential-probe --name github-invalid);

(type password),

(the first run downloads the package through npx, about a minute: a plain click, then one long wait, rather than --observe-ms, which records a few transient states).

is Credential check failed: invalid_auth with direct internet; behind the TLS-intercepting proxy the probe's own HTTPS call fails first and it reads Credential check failed: fetch failed.

has no value (--name slack-invalid);

(your proxy's CA bundle), then

(Add Server, Add Server [disabled], Add Server: Save tests first) keeps the editor open (control-openhands browser count 'testid=mcp-custom-editor' is 1) with the same red message, and

has no value; close it with

(an Escape pressed while the Save's test still runs is ignored).

shows the tool step (its title is model-written, e.g. Get current time in UTC via qa_time MCP) and the datetime reply. conversation start leaves the browser on the conversation:

(true; aria-label Disable server),

shows agent_settings.mcp_config.qa_time.enabled false with command, args and env intact;

shows the + icon.

is false, and

has count 0 (no SystemPromptEvent lists it).

(insideViewport true, pageHorizontalOverflow false) and

shows only the MCP form (browser count 'testid=mcp-install-tab-native' is 0).