docs: mark mcp-gateway fully decommissioned 2026-05-26

infra/connection-hosts.md

@@ -208,7 +208,7 @@ All behind `vpn_gluetun` container network.
 | 14001 | `lobehub` | `https://chat.nuclide.systems` | Chat UI (OIDC `26f3c26b`) |
 | 14002 | `qdrant_scientific` | — | Vector DB (LAN/internal only) |
 | 14003 | `bifrost` | `https://ai.nuclide.systems` | LLM+MCP gateway; `/mcp` = MCP endpoint (29 clients, ~760 tools); master key: `sk-tapirnase` |
-| 8080 | `mcp-gateway` | `https://mcp.nuclide.systems` | **PENDING DECOMMISSION** — legacy FastAPI DinD gateway; see [mcp-gateway.md](../services/mcp-gateway.md) |
+| ~~8080~~ | ~~`mcp-gateway`~~ | ~~`https://mcp.nuclide.systems`~~ | **DECOMMISSIONED 2026-05-26** — see [mcp-gateway.md](../services/mcp-gateway.md) |
 | 18002 | `comfyui` | — | Image gen (Intel Arc); LAN only |
 | 18003 | `comfyui-mcp` | via Bifrost `comfyui` client | FastMCP |
 | 18005 | `docling-mcp` | via Bifrost `docling` client | PDF→Markdown |
@@ -273,7 +273,7 @@ All behind `vpn_gluetun` container network.
 
 | Client ID | Service | Redirect URI |
 |---|---|---|
-| `e73bb7b9` | litellm / mcp-gateway | (empty — accepts all) |
+| ~~`e73bb7b9`~~ | ~~litellm / mcp-gateway~~ | **DELETED 2026-05-26** |
 | `26f3c26b` | lobehub | `https://chat.nuclide.systems/api/auth/callback/generic-oidc` |
 | `81cf4ed0` | arcane | `https://arcane.nuclide.systems/auth/oidc/callback` |
 | `33135ad4` | n8n | `https://n8n.nuclide.systems/auth/oidc/callback` |
@@ -286,7 +286,7 @@ All behind `vpn_gluetun` container network.
 | `38469e7e` | Proxmox VE | `https://192.168.1.20:8006` |
 | `cbbf20d5` | Audiobookshelf | `https://abs.nuclide.systems/…` + `*` |
 | `d8733fcc` | shelfarr | `*` |
-| `78c78998` | Claude MCP (legacy) | `https://claude.ai/api/mcp/auth_callback` + `https://mcp.nuclide.systems/mcp/auth/callback` — **remove when mcp-gateway decommissioned** |
+| ~~`78c78998`~~ | ~~Claude MCP (legacy)~~ | **DELETED 2026-05-26** |
 | `82ca2d53` | nuc-ai (MCP spawned servers) | (empty) |
 | `7fe1a14b` | zoraxy | (empty) |
 | (new) | vaultwarden | `https://vault.nuclide.systems/auth/callback` — SSO not yet wired |
@@ -300,7 +300,7 @@ All behind `vpn_gluetun` container network.
 |---|---|---|
 | `https://ai.nuclide.systems` | `192.168.1.40:14003` | Bifrost (LLM+MCP gateway) — `/mcp` for MCP tools |
 | `https://chat.nuclide.systems` | `192.168.1.40:14001` | LobeChat |
-| `https://mcp.nuclide.systems` | `192.168.1.40:8080` | MCP gateway (**pending decommission**) |
+| ~~`https://mcp.nuclide.systems`~~ | ~~`192.168.1.40:8080`~~ | **DECOMMISSIONED 2026-05-26** |
 | `https://id.nuclide.systems` | `192.168.1.5:11000` | Pocket-ID (OIDC) |
 | `https://nc.nuclide.systems` | `192.168.1.41:11000` | Nextcloud |
 | `https://ha.nuclide.systems` | `192.168.1.60:8123` | Home Assistant |

services/mcp-gateway.md

@@ -134,13 +134,11 @@ See `/tmp/add_all_mcp_clients.py` on CT 104 for a complete example.
 
 ## Legacy mcp-gateway (FastAPI / DinD)
 
-**Status: pending decommission.** Container `mcp-gateway` still running at `192.168.1.40:8080` / `https://mcp.nuclide.systems`. Stack: `ai/mcp-gateway/`.
+**Status: DECOMMISSIONED 2026-05-26.**
 
-Before removing:
-1. Confirm Zoraxy route `mcp.nuclide.systems` is no longer referenced anywhere (explicit user confirmation required before touching Zoraxy CT 108).
-2. Stop container: rename compose file to `docker-compose.yml.disabled`, update `/opt/stacks/CLAUDE.md`.
-3. Remove Pocket-ID client `e73bb7b9` (mcp-gateway) and `78c78998` (Claude MCP callback to mcp.nuclide.systems) after confirming no active tokens.
-4. Remove Zoraxy route `mcp.nuclide.systems` → `192.168.1.40:8080`.
+- Zoraxy route removed (config renamed to `.DECOMMISSIONED-2026-05-26` on CT 108)
+- Container stopped; compose file renamed to `docker-compose.yml.DECOMMISSIONED-2026-05-26`
+- Pocket-ID clients `e73bb7b9` (litellm/mcp-gateway) and `78c78998` (Claude MCP) deleted from CT 110 DB
 
 ## Bifrost OIDC client (Pocket ID)