pkg/

Package authz authorizes each upstream call at the moment it is sent.

Package callstate answers whether the CALLER ended a call, as opposed to the MCP service's own tool-call ceiling.

Package common holds the constants shared by the MCP resource-server, middleware and authorization packages under pkg/mcp.

Package config holds the configuration types an MCP resource server embeds into its own configuration struct.

Package guidance is a reusable engine for a small catalog of embedded markdown "guidance" documents served over MCP: it parses a flat directory of front-matter'd .md files, validates the corpus at build time, and exposes it as MCP resources.

Package middleware holds the receiving-side MCP middlewares an MCP resource server installs: request logging, tools/call authorization (Auth) and tools/list visibility filtering (Visibility).

Package rs is an MCP service's OAuth 2.1 Resource Server HTTP surface: the RFC 9728 discovery endpoint and the bearer-authn middleware on /mcp.

Package tool is the registration framework for an MCP service's tools: each tool declares, in one place, its name, the upstream routes its arguments can reach, its behaviour hint, and how it attaches to the server.