Publishing an MCP server to the official registry: the 403 gotcha and immutable versions
srikanth_builds · reddit · 2026-11-10
Supero's team shares lessons from publishing their MCP server (37 build tools over Streamable HTTP) to the official registry:
- The 403 root cause: publishing under io.github.supero-platform kept failing because the registry checks whether you're an active admin of the GitHub org — their private GitHub App token couldn't read that membership.
- What worked: publishing via GitHub Actions with mcp-publisher using github-oidc login, letting the org identity verify the namespace; they also verify server.json matches the live server's version before publishing.
- Versions are immutable: any fix, even a wrong description, requires a new version — they burned through three.
Supero is a backend platform for apps built by AI agents from Claude, ChatGPT, or coding editors. They admit it's early: no pen test or SOC 2 yet, audit logging being re-enabled, generated apps not production-hardened.
More from coding & agent
- LangChain lays out three-step eval-driven development for improving AI agents — LangChain · 2026-11-10
- Developer: getting an LLM to play a World of Warcraft bot is shockingly hard — shakoistsLog · 2026-11-10
- OpenCode 2 jumps from 8th to tied-first across models, cost per solved task falls 87% — lvwerra · 2026-11-10
- Dev spins up thousands of computer-use agent VMs with live terminal streaming — wavefnx · 2026-11-10
- Cursor discloses tampered Claude Code extensions attempting persistent SSH backdoors — thione · 2026-11-10
- Perplexity CEO says Teammates usage grows daily, three updates ship this week — AravSrinivas · 2026-11-10