Add search and invoke MCP mode

[RhysSullivan]

Add an optional search and invoke MCP mode through ?mode=passthrough, executor mcp --mode passthrough, or the MCP install UI. Codemode remains the default.

MCP advertises exactly two tools. Connecting does not load the tool catalog or any input schemas. search reuses the existing codemode search over tool metadata, then calls tools.schema(address) only for the result page (up to 20 tools). Results include full input schemas and account identity. invoke checks current visibility and fetches the selected tool's current schema before validating and running its arguments through the existing execution engine.

Invoke is marked potentially destructive for native client approval. Workspace blocks apply to cached IDs. Executor approval prompts and tool-originated prompts carry distinct provenance, so only the former can be accepted by this mode. Upstream prompts are relayed or refused when unsupported.

This PR is based directly on main. It adds no bulk describe API, schema cache, database changes, or migrations.

Validation: 241 MCP tests and 41 execution-search tests passed. The 10,000-tool case proves no discovery reads at connection time and schema reads bounded to the search page. Tests also cover fresh schema validation and static-tool exclusion. Selfhost e2e passed with authenticated upstream calls, input validation, and block enforcement. All 45 workspace typecheck tasks and scoped lint passed; repository formatting completed. The cloud scale and OpenCode suites were updated but not rerun.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	executor-marketing	9876c22	Commit Preview URL Branch Preview URL	Sep 15 2026, 01:28 AM

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	executor-cloud	9876c22	Sep 15 2026, 01:29 AM

[github-actions]

Cloudflare preview

Torn down — the PR is closed.

[pkg-pr-new]

Open in StackBlitz

@executor-js/cli

npm i https://pkg.pr.new/@executor-js/cli@1942

@executor-js/config

npm i https://pkg.pr.new/@executor-js/config@1942

@executor-js/execution

npm i https://pkg.pr.new/@executor-js/execution@1942

@executor-js/sdk

npm i https://pkg.pr.new/@executor-js/sdk@1942

@executor-js/codemode-core

npm i https://pkg.pr.new/@executor-js/codemode-core@1942

@executor-js/runtime-quickjs

npm i https://pkg.pr.new/@executor-js/runtime-quickjs@1942

@executor-js/plugin-file-secrets

npm i https://pkg.pr.new/@executor-js/plugin-file-secrets@1942

@executor-js/plugin-graphql

npm i https://pkg.pr.new/@executor-js/plugin-graphql@1942

@executor-js/plugin-keychain

npm i https://pkg.pr.new/@executor-js/plugin-keychain@1942

@executor-js/plugin-mcp

npm i https://pkg.pr.new/@executor-js/plugin-mcp@1942

@executor-js/plugin-onepassword

npm i https://pkg.pr.new/@executor-js/plugin-onepassword@1942

@executor-js/plugin-openapi

npm i https://pkg.pr.new/@executor-js/plugin-openapi@1942

executor

npm i https://pkg.pr.new/executor@1942

commit: 9876c22