mcp

type Options struct {
	// Name is the MCP server's reported implementation name.
	Name string
	// Version is the MCP server's reported implementation version.
	Version string
	// Bearer, when set, is propagated as `Authorization: Bearer <value>`
	// metadata on every gRPC dispatch. This is how MCP-side identity
	// reaches the gRPC handlers (security audit H1). The bearer should be
	// a token issued for the user the MCP host is acting on behalf of.
	Bearer string
	// AuthorizerURL, when set, is propagated as `x-authorizer-url` metadata
	// on every gRPC dispatch so JWT issuer validation resolves the host the
	// bearer token was minted by (not the in-process "bufconn" authority).
	// Required for identity-bearing tools when Bearer is set.
	AuthorizerURL string
}

type Server struct {
	// contains filtered or unexported fields
}

type ToolBinding struct {
	// Name surfaced to MCP clients (e.g. "get_meta"). Defaults to
	// snake_case(method) unless the proto annotation overrides it.
	Name string
	// Description from the RPC's leading comment, surfaced to the MCP host.
	Description string
	// Destructive hints to the MCP host that user confirmation is warranted.
	Destructive bool

	// FullMethod is the gRPC method name in `/pkg.Service/Method` form.
	// Used directly with grpc.ClientConn.Invoke.
	FullMethod string
	// InputDescriptor / OutputDescriptor are the proto message descriptors
	// for request/response. Used by the dispatcher to construct dynamic
	// proto.Message instances for JSON unmarshalling/marshalling.
	InputDescriptor  protoreflect.MessageDescriptor
	OutputDescriptor protoreflect.MessageDescriptor
}