Teahub's MCP against the Gitea at GITEA_URL. Sign-in is Gitea's OAuth (Gitea signs people in with GitHub or nostr), and every tool acts with the caller's own Gitea token. No service token, no allowlist, nothing deletes.

Env: GITEA_URL, PUBLIC_URL, ALLOWED_HOSTS; secrets GITEA_OAUTH_CLIENT_ID, GITEA_OAUTH_CLIENT_SECRET (an OAuth2 application on the Gitea with redirect PUBLIC_URL/auth/callback), JWT_SIGNING_KEY. State: /data (FastMCP's OAuth store).

Tools: tea_whoami, tea_issues, tea_issue_get/create/edit, tea_issue_comments/comment, tea_repo, tea_repo_create, tea_org_create, tea_org_add_member, tea_org_repo_create, tea_tree, tea_file_get/change, tea_actions, tea_workflow_dispatch. Repos are owner/repo.