@backstage/plugin-mcp-actions-backend 0.1.9 → 0.1.10-next.1

package/CHANGELOG.md

@@ -1,5 +1,33 @@
 # @backstage/plugin-mcp-actions-backend
 
+## 0.1.10-next.1
+
+### Patch Changes
+
+- 62f0a53: Fixed error forwarding in the actions registry so that known errors like `InputError` and `NotFoundError` thrown by actions preserve their original status codes and messages instead of being wrapped in `ForwardedError` and coerced to 500.
+- Updated dependencies
+  - @backstage/catalog-client@1.14.0-next.1
+  - @backstage/plugin-catalog-node@2.1.0-next.1
+  - @backstage/backend-plugin-api@1.7.1-next.0
+  - @backstage/errors@1.2.7
+  - @backstage/types@1.2.2
+
+## 0.1.10-next.0
+
+### Patch Changes
+
+- dc81af1: Adds two new metrics to track MCP server operations and sessions.
+
+  - `mcp.server.operation.duration`: The duration taken to process an individual MCP operation
+  - `mcp.server.session.duration`: The duration of the MCP session from the perspective of the server
+
+- Updated dependencies
+  - @backstage/plugin-catalog-node@2.1.0-next.0
+  - @backstage/backend-plugin-api@1.7.1-next.0
+  - @backstage/catalog-client@1.13.1-next.0
+  - @backstage/errors@1.2.7
+  - @backstage/types@1.2.2
+
 ## 0.1.9
 
 ### Patch Changes

package/README.md

@@ -75,7 +75,7 @@ export const myPlugin = createBackendPlugin({
 
 When errors are thrown from MCP actions, the backend will handle and surface error message for any error from `@backstage/errors`. Unknown errors will be handled by `@modelcontextprotocol/sdk`'s default error handling, which may result in a generic `500 Server Error` being returned. As a result, we recommend using errors from `@backstage/errors` when applicable.
 
-See https://backstage.io/api/stable/modules/_backstage_errors.html for a full list of supported errors.
+See [Backstage Errors](https://backstage.io/docs/reference/errors/) for a full list of supported errors.
 
 When writing MCP tools, use the appropriate error from `@backstage/errors` when applicable:
 
@@ -178,6 +178,13 @@ There's a few different ways to configure MCP tools, but here's a snippet of the
 }
 ```
 
+## Metrics
+
+The MCP Actions Backend emits metrics for the following operations:
+
+- `mcp.server.operation.duration`: The duration taken to process an individual MCP operation
+- `mcp.server.session.duration`: The duration of the MCP session from the perspective of the server
+
 ## Development
 
 This plugin backend can be started in a standalone mode from directly in this package with `yarn start`. It is a limited setup that is most convenient when developing the plugin backend itself.

package/dist/metrics.cjs.js

@@ -0,0 +1,21 @@
+'use strict';
+
+const bucketBoundaries = [
+  0.01,
+  0.02,
+  0.05,
+  0.1,
+  0.2,
+  0.5,
+  1,
+  2,
+  5,
+  10,
+  30,
+  60,
+  120,
+  300
+];
+
+exports.bucketBoundaries = bucketBoundaries;
+//# sourceMappingURL=metrics.cjs.js.map

package/dist/metrics.cjs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.cjs.js","sources":["../src/metrics.ts"],"sourcesContent":["/*\n * Copyright 2026 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { MetricAttributes } from '@backstage/backend-plugin-api/alpha';\n\n/**\n * Attributes for mcp.server.operation.duration\n * Following OTel requirement levels from the spec\n *\n * @see https://opentelemetry.io/docs/specs/semconv/gen-ai/mcp/#metric-mcpserveroperationduration\n */\nexport interface McpServerOperationAttributes extends MetricAttributes {\n  // Required\n  'mcp.method.name': string;\n\n  // Conditionally Required\n  'error.type'?: string;\n  'gen_ai.tool.name'?: string;\n  'gen_ai.prompt.name'?: string;\n  'mcp.resource.uri'?: string;\n  'rpc.response.status_code'?: string;\n\n  // Recommended\n  'gen_ai.operation.name'?: 'execute_tool';\n  'mcp.protocol.version'?: string;\n  'mcp.session.id'?: string;\n  'network.transport'?: 'tcp' | 'quic' | 'pipe' | 'unix';\n  'network.protocol.name'?: string;\n  'network.protocol.version'?: string;\n}\n\n/**\n * Attributes for mcp.server.session.duration\n * Following OTel requirement levels from the spec\n *\n * @see https://opentelemetry.io/docs/specs/semconv/gen-ai/mcp/#metric-mcpserversessionduration\n */\nexport interface McpServerSessionAttributes extends MetricAttributes {\n  // Conditionally Required\n  'error.type'?: string;\n\n  // Recommended\n  'mcp.protocol.version'?: string;\n  'network.transport'?: 'tcp' | 'quic' | 'pipe' | 'unix';\n  'network.protocol.name'?: string;\n  'network.protocol.version'?: string;\n}\n\n/**\n * OTel recommended bucket boundaries for MCP metrics\n *\n * @remarks\n *\n * Based on the MCP metrics defined in the OTel semantic conventions v1.39.0\n * @see https://opentelemetry.io/docs/specs/semconv/gen-ai/mcp/\n *\n */\nexport const bucketBoundaries = [\n  0.01, 0.02, 0.05, 0.1, 0.2, 0.5, 1, 2, 5, 10, 30, 60, 120, 300,\n];\n"],"names":[],"mappings":";;AAsEO,MAAM,gBAAA,GAAmB;AAAA,EAC9B,IAAA;AAAA,EAAM,IAAA;AAAA,EAAM,IAAA;AAAA,EAAM,GAAA;AAAA,EAAK,GAAA;AAAA,EAAK,GAAA;AAAA,EAAK,CAAA;AAAA,EAAG,CAAA;AAAA,EAAG,CAAA;AAAA,EAAG,EAAA;AAAA,EAAI,EAAA;AAAA,EAAI,EAAA;AAAA,EAAI,GAAA;AAAA,EAAK;AAC7D;;;;"}

package/dist/plugin.cjs.js

@@ -25,7 +25,8 @@ const mcpPlugin = backendPluginApi.createBackendPlugin({
         registry: alpha.actionsRegistryServiceRef,
         rootRouter: backendPluginApi.coreServices.rootHttpRouter,
         discovery: backendPluginApi.coreServices.discovery,
-        config: backendPluginApi.coreServices.rootConfig
+        config: backendPluginApi.coreServices.rootConfig,
+        metrics: alpha.metricsServiceRef
       },
       async init({
         actions,
@@ -34,10 +35,12 @@ const mcpPlugin = backendPluginApi.createBackendPlugin({
         httpAuth,
         rootRouter,
         discovery,
-        config
+        config,
+        metrics
       }) {
         const mcpService = await McpService.McpService.create({
-          actions
+          actions,
+          metrics
         });
         const sseRouter = createSseRouter.createSseRouter({
           mcpService,
@@ -46,7 +49,8 @@ const mcpPlugin = backendPluginApi.createBackendPlugin({
         const streamableRouter = createStreamableRouter.createStreamableRouter({
           mcpService,
           httpAuth,
-          logger
+          logger,
+          metrics
         });
         const router = PromiseRouter__default.default();
         router.use(express.json());

package/dist/plugin.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.cjs.js","sources":["../src/plugin.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport {\n  coreServices,\n  createBackendPlugin,\n} from '@backstage/backend-plugin-api';\nimport { json } from 'express';\nimport Router from 'express-promise-router';\nimport { McpService } from './services/McpService';\nimport { createStreamableRouter } from './routers/createStreamableRouter';\nimport { createSseRouter } from './routers/createSseRouter';\nimport {\n  actionsRegistryServiceRef,\n  actionsServiceRef,\n} from '@backstage/backend-plugin-api/alpha';\n\n/**\n * mcpPlugin backend plugin\n *\n * @public\n */\nexport const mcpPlugin = createBackendPlugin({\n  pluginId: 'mcp-actions',\n  register(env) {\n    env.registerInit({\n      deps: {\n        logger: coreServices.logger,\n        auth: coreServices.auth,\n        httpAuth: coreServices.httpAuth,\n        httpRouter: coreServices.httpRouter,\n        actions: actionsServiceRef,\n        registry: actionsRegistryServiceRef,\n        rootRouter: coreServices.rootHttpRouter,\n        discovery: coreServices.discovery,\n        config: coreServices.rootConfig,\n      },\n      async init({\n        actions,\n        logger,\n        httpRouter,\n        httpAuth,\n        rootRouter,\n        discovery,\n        config,\n      }) {\n        const mcpService = await McpService.create({\n          actions,\n        });\n\n        const sseRouter = createSseRouter({\n          mcpService,\n          httpAuth,\n        });\n\n        const streamableRouter = createStreamableRouter({\n          mcpService,\n          httpAuth,\n          logger,\n        });\n\n        const router = Router();\n        router.use(json());\n\n        router.use('/v1/sse', sseRouter);\n        router.use('/v1', streamableRouter);\n\n        httpRouter.use(router);\n\n        const oauthEnabled =\n          config.getOptionalBoolean(\n            'auth.experimentalDynamicClientRegistration.enabled',\n          ) ||\n          config.getOptionalBoolean(\n            'auth.experimentalClientIdMetadataDocuments.enabled',\n          );\n\n        if (oauthEnabled) {\n          // OAuth Authorization Server Metadata (RFC 8414)\n          // This should be replaced with throwing a WWW-Authenticate header, but that doesn't seem to be supported by\n          // many of the MCP clients as of yet. So this seems to be the oldest version of the spec that's implemented.\n          rootRouter.use(\n            '/.well-known/oauth-authorization-server',\n            async (_, res) => {\n              const authBaseUrl = await discovery.getBaseUrl('auth');\n              const oidcResponse = await fetch(\n                `${authBaseUrl}/.well-known/openid-configuration`,\n              );\n              res.json(await oidcResponse.json());\n            },\n          );\n\n          // Protected Resource Metadata (RFC 9728)\n          // https://datatracker.ietf.org/doc/html/rfc9728\n          // This allows MCP clients to discover the authorization server for this resource\n          rootRouter.use(\n            '/.well-known/oauth-protected-resource',\n            async (_, res) => {\n              const [authBaseUrl, mcpBaseUrl] = await Promise.all([\n                discovery.getBaseUrl('auth'),\n                discovery.getBaseUrl('mcp-actions'),\n              ]);\n              res.json({\n                resource: mcpBaseUrl,\n                authorization_servers: [authBaseUrl],\n              });\n            },\n          );\n        }\n      },\n    });\n  },\n});\n"],"names":["createBackendPlugin","coreServices","actionsServiceRef","actionsRegistryServiceRef","McpService","createSseRouter","createStreamableRouter","Router","json"],"mappings":";;;;;;;;;;;;;;AAkCO,MAAM,YAAYA,oCAAA,CAAoB;AAAA,EAC3C,QAAA,EAAU,aAAA;AAAA,EACV,SAAS,GAAA,EAAK;AACZ,IAAA,GAAA,CAAI,YAAA,CAAa;AAAA,MACf,IAAA,EAAM;AAAA,QACJ,QAAQC,6BAAA,CAAa,MAAA;AAAA,QACrB,MAAMA,6BAAA,CAAa,IAAA;AAAA,QACnB,UAAUA,6BAAA,CAAa,QAAA;AAAA,QACvB,YAAYA,6BAAA,CAAa,UAAA;AAAA,QACzB,OAAA,EAASC,uBAAA;AAAA,QACT,QAAA,EAAUC,+BAAA;AAAA,QACV,YAAYF,6BAAA,CAAa,cAAA;AAAA,QACzB,WAAWA,6BAAA,CAAa,SAAA;AAAA,QACxB,QAAQA,6BAAA,CAAa;AAAA,OACvB;AAAA,MACA,MAAM,IAAA,CAAK;AAAA,QACT,OAAA;AAAA,QACA,MAAA;AAAA,QACA,UAAA;AAAA,QACA,QAAA;AAAA,QACA,UAAA;AAAA,QACA,SAAA;AAAA,QACA;AAAA,OACF,EAAG;AACD,QAAA,MAAM,UAAA,GAAa,MAAMG,qBAAA,CAAW,MAAA,CAAO;AAAA,UACzC;AAAA,SACD,CAAA;AAED,QAAA,MAAM,YAAYC,+BAAA,CAAgB;AAAA,UAChC,UAAA;AAAA,UACA;AAAA,SACD,CAAA;AAED,QAAA,MAAM,mBAAmBC,6CAAA,CAAuB;AAAA,UAC9C,UAAA;AAAA,UACA,QAAA;AAAA,UACA;AAAA,SACD,CAAA;AAED,QAAA,MAAM,SAASC,8BAAA,EAAO;AACtB,QAAA,MAAA,CAAO,GAAA,CAAIC,cAAM,CAAA;AAEjB,QAAA,MAAA,CAAO,GAAA,CAAI,WAAW,SAAS,CAAA;AAC/B,QAAA,MAAA,CAAO,GAAA,CAAI,OAAO,gBAAgB,CAAA;AAElC,QAAA,UAAA,CAAW,IAAI,MAAM,CAAA;AAErB,QAAA,MAAM,eACJ,MAAA,CAAO,kBAAA;AAAA,UACL;AAAA,aAEF,MAAA,CAAO,kBAAA;AAAA,UACL;AAAA,SACF;AAEF,QAAA,IAAI,YAAA,EAAc;AAIhB,UAAA,UAAA,CAAW,GAAA;AAAA,YACT,yCAAA;AAAA,YACA,OAAO,GAAG,GAAA,KAAQ;AAChB,cAAA,MAAM,WAAA,GAAc,MAAM,SAAA,CAAU,UAAA,CAAW,MAAM,CAAA;AACrD,cAAA,MAAM,eAAe,MAAM,KAAA;AAAA,gBACzB,GAAG,WAAW,CAAA,iCAAA;AAAA,eAChB;AACA,cAAA,GAAA,CAAI,IAAA,CAAK,MAAM,YAAA,CAAa,IAAA,EAAM,CAAA;AAAA,YACpC;AAAA,WACF;AAKA,UAAA,UAAA,CAAW,GAAA;AAAA,YACT,uCAAA;AAAA,YACA,OAAO,GAAG,GAAA,KAAQ;AAChB,cAAA,MAAM,CAAC,WAAA,EAAa,UAAU,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,gBAClD,SAAA,CAAU,WAAW,MAAM,CAAA;AAAA,gBAC3B,SAAA,CAAU,WAAW,aAAa;AAAA,eACnC,CAAA;AACD,cAAA,GAAA,CAAI,IAAA,CAAK;AAAA,gBACP,QAAA,EAAU,UAAA;AAAA,gBACV,qBAAA,EAAuB,CAAC,WAAW;AAAA,eACpC,CAAA;AAAA,YACH;AAAA,WACF;AAAA,QACF;AAAA,MACF;AAAA,KACD,CAAA;AAAA,EACH;AACF,CAAC;;;;"}
+{"version":3,"file":"plugin.cjs.js","sources":["../src/plugin.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport {\n  coreServices,\n  createBackendPlugin,\n} from '@backstage/backend-plugin-api';\nimport { json } from 'express';\nimport Router from 'express-promise-router';\nimport { McpService } from './services/McpService';\nimport { createStreamableRouter } from './routers/createStreamableRouter';\nimport { createSseRouter } from './routers/createSseRouter';\nimport {\n  actionsRegistryServiceRef,\n  actionsServiceRef,\n  metricsServiceRef,\n} from '@backstage/backend-plugin-api/alpha';\n\n/**\n * mcpPlugin backend plugin\n *\n * @public\n */\nexport const mcpPlugin = createBackendPlugin({\n  pluginId: 'mcp-actions',\n  register(env) {\n    env.registerInit({\n      deps: {\n        logger: coreServices.logger,\n        auth: coreServices.auth,\n        httpAuth: coreServices.httpAuth,\n        httpRouter: coreServices.httpRouter,\n        actions: actionsServiceRef,\n        registry: actionsRegistryServiceRef,\n        rootRouter: coreServices.rootHttpRouter,\n        discovery: coreServices.discovery,\n        config: coreServices.rootConfig,\n        metrics: metricsServiceRef,\n      },\n      async init({\n        actions,\n        logger,\n        httpRouter,\n        httpAuth,\n        rootRouter,\n        discovery,\n        config,\n        metrics,\n      }) {\n        const mcpService = await McpService.create({\n          actions,\n          metrics,\n        });\n\n        const sseRouter = createSseRouter({\n          mcpService,\n          httpAuth,\n        });\n\n        const streamableRouter = createStreamableRouter({\n          mcpService,\n          httpAuth,\n          logger,\n          metrics,\n        });\n\n        const router = Router();\n        router.use(json());\n\n        router.use('/v1/sse', sseRouter);\n        router.use('/v1', streamableRouter);\n\n        httpRouter.use(router);\n\n        const oauthEnabled =\n          config.getOptionalBoolean(\n            'auth.experimentalDynamicClientRegistration.enabled',\n          ) ||\n          config.getOptionalBoolean(\n            'auth.experimentalClientIdMetadataDocuments.enabled',\n          );\n\n        if (oauthEnabled) {\n          // OAuth Authorization Server Metadata (RFC 8414)\n          // This should be replaced with throwing a WWW-Authenticate header, but that doesn't seem to be supported by\n          // many of the MCP clients as of yet. So this seems to be the oldest version of the spec that's implemented.\n          rootRouter.use(\n            '/.well-known/oauth-authorization-server',\n            async (_, res) => {\n              const authBaseUrl = await discovery.getBaseUrl('auth');\n              const oidcResponse = await fetch(\n                `${authBaseUrl}/.well-known/openid-configuration`,\n              );\n              res.json(await oidcResponse.json());\n            },\n          );\n\n          // Protected Resource Metadata (RFC 9728)\n          // https://datatracker.ietf.org/doc/html/rfc9728\n          // This allows MCP clients to discover the authorization server for this resource\n          rootRouter.use(\n            '/.well-known/oauth-protected-resource',\n            async (_, res) => {\n              const [authBaseUrl, mcpBaseUrl] = await Promise.all([\n                discovery.getBaseUrl('auth'),\n                discovery.getBaseUrl('mcp-actions'),\n              ]);\n              res.json({\n                resource: mcpBaseUrl,\n                authorization_servers: [authBaseUrl],\n              });\n            },\n          );\n        }\n      },\n    });\n  },\n});\n"],"names":["createBackendPlugin","coreServices","actionsServiceRef","actionsRegistryServiceRef","metricsServiceRef","McpService","createSseRouter","createStreamableRouter","Router","json"],"mappings":";;;;;;;;;;;;;;AAmCO,MAAM,YAAYA,oCAAA,CAAoB;AAAA,EAC3C,QAAA,EAAU,aAAA;AAAA,EACV,SAAS,GAAA,EAAK;AACZ,IAAA,GAAA,CAAI,YAAA,CAAa;AAAA,MACf,IAAA,EAAM;AAAA,QACJ,QAAQC,6BAAA,CAAa,MAAA;AAAA,QACrB,MAAMA,6BAAA,CAAa,IAAA;AAAA,QACnB,UAAUA,6BAAA,CAAa,QAAA;AAAA,QACvB,YAAYA,6BAAA,CAAa,UAAA;AAAA,QACzB,OAAA,EAASC,uBAAA;AAAA,QACT,QAAA,EAAUC,+BAAA;AAAA,QACV,YAAYF,6BAAA,CAAa,cAAA;AAAA,QACzB,WAAWA,6BAAA,CAAa,SAAA;AAAA,QACxB,QAAQA,6BAAA,CAAa,UAAA;AAAA,QACrB,OAAA,EAASG;AAAA,OACX;AAAA,MACA,MAAM,IAAA,CAAK;AAAA,QACT,OAAA;AAAA,QACA,MAAA;AAAA,QACA,UAAA;AAAA,QACA,QAAA;AAAA,QACA,UAAA;AAAA,QACA,SAAA;AAAA,QACA,MAAA;AAAA,QACA;AAAA,OACF,EAAG;AACD,QAAA,MAAM,UAAA,GAAa,MAAMC,qBAAA,CAAW,MAAA,CAAO;AAAA,UACzC,OAAA;AAAA,UACA;AAAA,SACD,CAAA;AAED,QAAA,MAAM,YAAYC,+BAAA,CAAgB;AAAA,UAChC,UAAA;AAAA,UACA;AAAA,SACD,CAAA;AAED,QAAA,MAAM,mBAAmBC,6CAAA,CAAuB;AAAA,UAC9C,UAAA;AAAA,UACA,QAAA;AAAA,UACA,MAAA;AAAA,UACA;AAAA,SACD,CAAA;AAED,QAAA,MAAM,SAASC,8BAAA,EAAO;AACtB,QAAA,MAAA,CAAO,GAAA,CAAIC,cAAM,CAAA;AAEjB,QAAA,MAAA,CAAO,GAAA,CAAI,WAAW,SAAS,CAAA;AAC/B,QAAA,MAAA,CAAO,GAAA,CAAI,OAAO,gBAAgB,CAAA;AAElC,QAAA,UAAA,CAAW,IAAI,MAAM,CAAA;AAErB,QAAA,MAAM,eACJ,MAAA,CAAO,kBAAA;AAAA,UACL;AAAA,aAEF,MAAA,CAAO,kBAAA;AAAA,UACL;AAAA,SACF;AAEF,QAAA,IAAI,YAAA,EAAc;AAIhB,UAAA,UAAA,CAAW,GAAA;AAAA,YACT,yCAAA;AAAA,YACA,OAAO,GAAG,GAAA,KAAQ;AAChB,cAAA,MAAM,WAAA,GAAc,MAAM,SAAA,CAAU,UAAA,CAAW,MAAM,CAAA;AACrD,cAAA,MAAM,eAAe,MAAM,KAAA;AAAA,gBACzB,GAAG,WAAW,CAAA,iCAAA;AAAA,eAChB;AACA,cAAA,GAAA,CAAI,IAAA,CAAK,MAAM,YAAA,CAAa,IAAA,EAAM,CAAA;AAAA,YACpC;AAAA,WACF;AAKA,UAAA,UAAA,CAAW,GAAA;AAAA,YACT,uCAAA;AAAA,YACA,OAAO,GAAG,GAAA,KAAQ;AAChB,cAAA,MAAM,CAAC,WAAA,EAAa,UAAU,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,gBAClD,SAAA,CAAU,WAAW,MAAM,CAAA;AAAA,gBAC3B,SAAA,CAAU,WAAW,aAAa;AAAA,eACnC,CAAA;AACD,cAAA,GAAA,CAAI,IAAA,CAAK;AAAA,gBACP,QAAA,EAAU,UAAA;AAAA,gBACV,qBAAA,EAAuB,CAAC,WAAW;AAAA,eACpC,CAAA;AAAA,YACH;AAAA,WACF;AAAA,QACF;AAAA,MACF;AAAA,KACD,CAAA;AAAA,EACH;AACF,CAAC;;;;"}

package/dist/routers/createStreamableRouter.cjs.js

@@ -1,8 +1,11 @@
 'use strict';
 
 var PromiseRouter = require('express-promise-router');
+var node_perf_hooks = require('node:perf_hooks');
 var streamableHttp_js = require('@modelcontextprotocol/sdk/server/streamableHttp.js');
+var types_js = require('@modelcontextprotocol/sdk/types.js');
 var errors = require('@backstage/errors');
+var metrics = require('../metrics.cjs.js');
 
 function _interopDefaultCompat (e) { return e && typeof e === 'object' && 'default' in e ? e : { default: e }; }
 
@@ -11,10 +14,25 @@ var PromiseRouter__default = /*#__PURE__*/_interopDefaultCompat(PromiseRouter);
 const createStreamableRouter = ({
   mcpService,
   httpAuth,
-  logger
+  logger,
+  metrics: metrics$1
 }) => {
   const router = PromiseRouter__default.default();
+  const sessionDuration = metrics$1.createHistogram(
+    "mcp.server.session.duration",
+    {
+      description: "The duration of the MCP session as observed on the MCP server",
+      unit: "s",
+      advice: { explicitBucketBoundaries: metrics.bucketBoundaries }
+    }
+  );
   router.post("/", async (req, res) => {
+    const sessionStart = node_perf_hooks.performance.now();
+    const baseAttributes = {
+      "mcp.protocol.version": types_js.LATEST_PROTOCOL_VERSION,
+      "network.transport": "tcp",
+      "network.protocol.name": "http"
+    };
     try {
       const server = mcpService.getServer({
         credentials: await httpAuth.credentials(req)
@@ -29,8 +47,11 @@ const createStreamableRouter = ({
       res.on("close", () => {
         transport.close();
         server.close();
+        const durationSeconds = (node_perf_hooks.performance.now() - sessionStart) / 1e3;
+        sessionDuration.record(durationSeconds, baseAttributes);
       });
     } catch (error) {
+      const errorType = errors.isError(error) ? error.name : "Error";
       if (errors.isError(error)) {
         logger.error(error.message);
       }
@@ -44,6 +65,11 @@ const createStreamableRouter = ({
           id: null
         });
       }
+      const durationSeconds = (node_perf_hooks.performance.now() - sessionStart) / 1e3;
+      sessionDuration.record(durationSeconds, {
+        ...baseAttributes,
+        "error.type": errorType
+      });
     }
   });
   router.get("/", async (_, res) => {

package/dist/routers/createStreamableRouter.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"createStreamableRouter.cjs.js","sources":["../../src/routers/createStreamableRouter.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport PromiseRouter from 'express-promise-router';\nimport { Router } from 'express';\nimport { McpService } from '../services/McpService';\nimport { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';\nimport { HttpAuthService, LoggerService } from '@backstage/backend-plugin-api';\nimport { isError } from '@backstage/errors';\n\nexport const createStreamableRouter = ({\n  mcpService,\n  httpAuth,\n  logger,\n}: {\n  mcpService: McpService;\n  logger: LoggerService;\n  httpAuth: HttpAuthService;\n}): Router => {\n  const router = PromiseRouter();\n\n  router.post('/', async (req, res) => {\n    try {\n      const server = mcpService.getServer({\n        credentials: await httpAuth.credentials(req),\n      });\n\n      const transport = new StreamableHTTPServerTransport({\n        // stateless implementation for now, so that we can support multiple\n        // instances of the server backend, and avoid sticky sessions.\n        sessionIdGenerator: undefined,\n      });\n\n      await server.connect(transport);\n      await transport.handleRequest(req, res, req.body);\n\n      res.on('close', () => {\n        transport.close();\n        server.close();\n      });\n    } catch (error) {\n      if (isError(error)) {\n        logger.error(error.message);\n      }\n\n      if (!res.headersSent) {\n        res.status(500).json({\n          jsonrpc: '2.0',\n          error: {\n            code: -32603,\n            message: 'Internal server error',\n          },\n          id: null,\n        });\n      }\n    }\n  });\n\n  router.get('/', async (_, res) => {\n    // We only support POST requests, so we return a 405 error for all other methods.\n    res.writeHead(405).end(\n      JSON.stringify({\n        jsonrpc: '2.0',\n        error: {\n          code: -32000,\n          message: 'Method not allowed.',\n        },\n        id: null,\n      }),\n    );\n  });\n\n  router.delete('/', async (_, res) => {\n    // We only support POST requests, so we return a 405 error for all other methods.\n    res.writeHead(405).end(\n      JSON.stringify({\n        jsonrpc: '2.0',\n        error: {\n          code: -32000,\n          message: 'Method not allowed.',\n        },\n        id: null,\n      }),\n    );\n  });\n\n  return router;\n};\n"],"names":["PromiseRouter","StreamableHTTPServerTransport","isError"],"mappings":";;;;;;;;;;AAsBO,MAAM,yBAAyB,CAAC;AAAA,EACrC,UAAA;AAAA,EACA,QAAA;AAAA,EACA;AACF,CAAA,KAIc;AACZ,EAAA,MAAM,SAASA,8BAAA,EAAc;AAE7B,EAAA,MAAA,CAAO,IAAA,CAAK,GAAA,EAAK,OAAO,GAAA,EAAK,GAAA,KAAQ;AACnC,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,WAAW,SAAA,CAAU;AAAA,QAClC,WAAA,EAAa,MAAM,QAAA,CAAS,WAAA,CAAY,GAAG;AAAA,OAC5C,CAAA;AAED,MAAA,MAAM,SAAA,GAAY,IAAIC,+CAAA,CAA8B;AAAA;AAAA;AAAA,QAGlD,kBAAA,EAAoB,KAAA;AAAA,OACrB,CAAA;AAED,MAAA,MAAM,MAAA,CAAO,QAAQ,SAAS,CAAA;AAC9B,MAAA,MAAM,SAAA,CAAU,aAAA,CAAc,GAAA,EAAK,GAAA,EAAK,IAAI,IAAI,CAAA;AAEhD,MAAA,GAAA,CAAI,EAAA,CAAG,SAAS,MAAM;AACpB,QAAA,SAAA,CAAU,KAAA,EAAM;AAChB,QAAA,MAAA,CAAO,KAAA,EAAM;AAAA,MACf,CAAC,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AACd,MAAA,IAAIC,cAAA,CAAQ,KAAK,CAAA,EAAG;AAClB,QAAA,MAAA,CAAO,KAAA,CAAM,MAAM,OAAO,CAAA;AAAA,MAC5B;AAEA,MAAA,IAAI,CAAC,IAAI,WAAA,EAAa;AACpB,QAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK;AAAA,UACnB,OAAA,EAAS,KAAA;AAAA,UACT,KAAA,EAAO;AAAA,YACL,IAAA,EAAM,MAAA;AAAA,YACN,OAAA,EAAS;AAAA,WACX;AAAA,UACA,EAAA,EAAI;AAAA,SACL,CAAA;AAAA,MACH;AAAA,IACF;AAAA,EACF,CAAC,CAAA;AAED,EAAA,MAAA,CAAO,GAAA,CAAI,GAAA,EAAK,OAAO,CAAA,EAAG,GAAA,KAAQ;AAEhC,IAAA,GAAA,CAAI,SAAA,CAAU,GAAG,CAAA,CAAE,GAAA;AAAA,MACjB,KAAK,SAAA,CAAU;AAAA,QACb,OAAA,EAAS,KAAA;AAAA,QACT,KAAA,EAAO;AAAA,UACL,IAAA,EAAM,KAAA;AAAA,UACN,OAAA,EAAS;AAAA,SACX;AAAA,QACA,EAAA,EAAI;AAAA,OACL;AAAA,KACH;AAAA,EACF,CAAC,CAAA;AAED,EAAA,MAAA,CAAO,MAAA,CAAO,GAAA,EAAK,OAAO,CAAA,EAAG,GAAA,KAAQ;AAEnC,IAAA,GAAA,CAAI,SAAA,CAAU,GAAG,CAAA,CAAE,GAAA;AAAA,MACjB,KAAK,SAAA,CAAU;AAAA,QACb,OAAA,EAAS,KAAA;AAAA,QACT,KAAA,EAAO;AAAA,UACL,IAAA,EAAM,KAAA;AAAA,UACN,OAAA,EAAS;AAAA,SACX;AAAA,QACA,EAAA,EAAI;AAAA,OACL;AAAA,KACH;AAAA,EACF,CAAC,CAAA;AAED,EAAA,OAAO,MAAA;AACT;;;;"}
+{"version":3,"file":"createStreamableRouter.cjs.js","sources":["../../src/routers/createStreamableRouter.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport PromiseRouter from 'express-promise-router';\nimport { Router } from 'express';\nimport { performance } from 'node:perf_hooks';\nimport { McpService } from '../services/McpService';\nimport { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';\nimport { LATEST_PROTOCOL_VERSION } from '@modelcontextprotocol/sdk/types.js';\nimport { HttpAuthService, LoggerService } from '@backstage/backend-plugin-api';\nimport { isError } from '@backstage/errors';\nimport { MetricsService } from '@backstage/backend-plugin-api/alpha';\nimport { bucketBoundaries, McpServerSessionAttributes } from '../metrics';\n\nexport const createStreamableRouter = ({\n  mcpService,\n  httpAuth,\n  logger,\n  metrics,\n}: {\n  mcpService: McpService;\n  logger: LoggerService;\n  httpAuth: HttpAuthService;\n  metrics: MetricsService;\n}): Router => {\n  const router = PromiseRouter();\n\n  const sessionDuration = metrics.createHistogram<McpServerSessionAttributes>(\n    'mcp.server.session.duration',\n    {\n      description:\n        'The duration of the MCP session as observed on the MCP server',\n      unit: 's',\n      advice: { explicitBucketBoundaries: bucketBoundaries },\n    },\n  );\n\n  router.post('/', async (req, res) => {\n    const sessionStart = performance.now();\n\n    const baseAttributes: McpServerSessionAttributes = {\n      'mcp.protocol.version': LATEST_PROTOCOL_VERSION,\n      'network.transport': 'tcp',\n      'network.protocol.name': 'http',\n    };\n\n    try {\n      const server = mcpService.getServer({\n        credentials: await httpAuth.credentials(req),\n      });\n\n      const transport = new StreamableHTTPServerTransport({\n        // stateless implementation for now, so that we can support multiple\n        // instances of the server backend, and avoid sticky sessions.\n        sessionIdGenerator: undefined,\n      });\n\n      await server.connect(transport);\n      await transport.handleRequest(req, res, req.body);\n\n      res.on('close', () => {\n        transport.close();\n        server.close();\n\n        const durationSeconds = (performance.now() - sessionStart) / 1000;\n\n        sessionDuration.record(durationSeconds, baseAttributes);\n      });\n    } catch (error) {\n      const errorType = isError(error) ? error.name : 'Error';\n\n      if (isError(error)) {\n        logger.error(error.message);\n      }\n\n      if (!res.headersSent) {\n        res.status(500).json({\n          jsonrpc: '2.0',\n          error: {\n            code: -32603,\n            message: 'Internal server error',\n          },\n          id: null,\n        });\n      }\n\n      const durationSeconds = (performance.now() - sessionStart) / 1000;\n\n      sessionDuration.record(durationSeconds, {\n        ...baseAttributes,\n        'error.type': errorType,\n      });\n    }\n  });\n\n  router.get('/', async (_, res) => {\n    // We only support POST requests, so we return a 405 error for all other methods.\n    res.writeHead(405).end(\n      JSON.stringify({\n        jsonrpc: '2.0',\n        error: {\n          code: -32000,\n          message: 'Method not allowed.',\n        },\n        id: null,\n      }),\n    );\n  });\n\n  router.delete('/', async (_, res) => {\n    // We only support POST requests, so we return a 405 error for all other methods.\n    res.writeHead(405).end(\n      JSON.stringify({\n        jsonrpc: '2.0',\n        error: {\n          code: -32000,\n          message: 'Method not allowed.',\n        },\n        id: null,\n      }),\n    );\n  });\n\n  return router;\n};\n"],"names":["metrics","PromiseRouter","bucketBoundaries","performance","LATEST_PROTOCOL_VERSION","StreamableHTTPServerTransport","isError"],"mappings":";;;;;;;;;;;;;AA0BO,MAAM,yBAAyB,CAAC;AAAA,EACrC,UAAA;AAAA,EACA,QAAA;AAAA,EACA,MAAA;AAAA,WACAA;AACF,CAAA,KAKc;AACZ,EAAA,MAAM,SAASC,8BAAA,EAAc;AAE7B,EAAA,MAAM,kBAAkBD,SAAA,CAAQ,eAAA;AAAA,IAC9B,6BAAA;AAAA,IACA;AAAA,MACE,WAAA,EACE,+DAAA;AAAA,MACF,IAAA,EAAM,GAAA;AAAA,MACN,MAAA,EAAQ,EAAE,wBAAA,EAA0BE,wBAAA;AAAiB;AACvD,GACF;AAEA,EAAA,MAAA,CAAO,IAAA,CAAK,GAAA,EAAK,OAAO,GAAA,EAAK,GAAA,KAAQ;AACnC,IAAA,MAAM,YAAA,GAAeC,4BAAY,GAAA,EAAI;AAErC,IAAA,MAAM,cAAA,GAA6C;AAAA,MACjD,sBAAA,EAAwBC,gCAAA;AAAA,MACxB,mBAAA,EAAqB,KAAA;AAAA,MACrB,uBAAA,EAAyB;AAAA,KAC3B;AAEA,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,WAAW,SAAA,CAAU;AAAA,QAClC,WAAA,EAAa,MAAM,QAAA,CAAS,WAAA,CAAY,GAAG;AAAA,OAC5C,CAAA;AAED,MAAA,MAAM,SAAA,GAAY,IAAIC,+CAAA,CAA8B;AAAA;AAAA;AAAA,QAGlD,kBAAA,EAAoB,KAAA;AAAA,OACrB,CAAA;AAED,MAAA,MAAM,MAAA,CAAO,QAAQ,SAAS,CAAA;AAC9B,MAAA,MAAM,SAAA,CAAU,aAAA,CAAc,GAAA,EAAK,GAAA,EAAK,IAAI,IAAI,CAAA;AAEhD,MAAA,GAAA,CAAI,EAAA,CAAG,SAAS,MAAM;AACpB,QAAA,SAAA,CAAU,KAAA,EAAM;AAChB,QAAA,MAAA,CAAO,KAAA,EAAM;AAEb,QAAA,MAAM,eAAA,GAAA,CAAmBF,2BAAA,CAAY,GAAA,EAAI,GAAI,YAAA,IAAgB,GAAA;AAE7D,QAAA,eAAA,CAAgB,MAAA,CAAO,iBAAiB,cAAc,CAAA;AAAA,MACxD,CAAC,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,SAAA,GAAYG,cAAA,CAAQ,KAAK,CAAA,GAAI,MAAM,IAAA,GAAO,OAAA;AAEhD,MAAA,IAAIA,cAAA,CAAQ,KAAK,CAAA,EAAG;AAClB,QAAA,MAAA,CAAO,KAAA,CAAM,MAAM,OAAO,CAAA;AAAA,MAC5B;AAEA,MAAA,IAAI,CAAC,IAAI,WAAA,EAAa;AACpB,QAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK;AAAA,UACnB,OAAA,EAAS,KAAA;AAAA,UACT,KAAA,EAAO;AAAA,YACL,IAAA,EAAM,MAAA;AAAA,YACN,OAAA,EAAS;AAAA,WACX;AAAA,UACA,EAAA,EAAI;AAAA,SACL,CAAA;AAAA,MACH;AAEA,MAAA,MAAM,eAAA,GAAA,CAAmBH,2BAAA,CAAY,GAAA,EAAI,GAAI,YAAA,IAAgB,GAAA;AAE7D,MAAA,eAAA,CAAgB,OAAO,eAAA,EAAiB;AAAA,QACtC,GAAG,cAAA;AAAA,QACH,YAAA,EAAc;AAAA,OACf,CAAA;AAAA,IACH;AAAA,EACF,CAAC,CAAA;AAED,EAAA,MAAA,CAAO,GAAA,CAAI,GAAA,EAAK,OAAO,CAAA,EAAG,GAAA,KAAQ;AAEhC,IAAA,GAAA,CAAI,SAAA,CAAU,GAAG,CAAA,CAAE,GAAA;AAAA,MACjB,KAAK,SAAA,CAAU;AAAA,QACb,OAAA,EAAS,KAAA;AAAA,QACT,KAAA,EAAO;AAAA,UACL,IAAA,EAAM,KAAA;AAAA,UACN,OAAA,EAAS;AAAA,SACX;AAAA,QACA,EAAA,EAAI;AAAA,OACL;AAAA,KACH;AAAA,EACF,CAAC,CAAA;AAED,EAAA,MAAA,CAAO,MAAA,CAAO,GAAA,EAAK,OAAO,CAAA,EAAG,GAAA,KAAQ;AAEnC,IAAA,GAAA,CAAI,SAAA,CAAU,GAAG,CAAA,CAAE,GAAA;AAAA,MACjB,KAAK,SAAA,CAAU;AAAA,QACb,OAAA,EAAS,KAAA;AAAA,QACT,KAAA,EAAO;AAAA,UACL,IAAA,EAAM,KAAA;AAAA,UACN,OAAA,EAAS;AAAA,SACX;AAAA,QACA,EAAA,EAAI;AAAA,OACL;AAAA,KACH;AAAA,EACF,CAAC,CAAA;AAED,EAAA,OAAO,MAAA;AACT;;;;"}

package/dist/services/McpService.cjs.js

@@ -4,15 +4,29 @@ var index_js = require('@modelcontextprotocol/sdk/server/index.js');
 var types_js = require('@modelcontextprotocol/sdk/types.js');
 var package_json = require('@backstage/plugin-mcp-actions-backend/package.json');
 var errors = require('@backstage/errors');
+var node_perf_hooks = require('node:perf_hooks');
 var handleErrors = require('./handleErrors.cjs.js');
+var metrics = require('../metrics.cjs.js');
 
 class McpService {
   actions;
-  constructor(actions) {
+  operationDuration;
+  constructor(actions, metrics$1) {
     this.actions = actions;
+    this.operationDuration = metrics$1.createHistogram(
+      "mcp.server.operation.duration",
+      {
+        description: "MCP request duration as observed on the receiver",
+        unit: "s",
+        advice: { explicitBucketBoundaries: metrics.bucketBoundaries }
+      }
+    );
   }
-  static async create({ actions }) {
-    return new McpService(actions);
+  static async create({
+    actions,
+    metrics
+  }) {
+    return new McpService(actions, metrics);
   }
   getServer({ credentials }) {
     const server = new index_js.Server(
@@ -24,51 +38,86 @@ class McpService {
       { capabilities: { tools: {} } }
     );
     server.setRequestHandler(types_js.ListToolsRequestSchema, async () => {
-      const { actions } = await this.actions.list({ credentials });
-      return {
-        tools: actions.map((action) => ({
-          inputSchema: action.schema.input,
-          // todo(blam): this is unfortunately not supported by most clients yet.
-          // When this is provided you need to provide structuredContent instead.
-          // outputSchema: action.schema.output,
-          name: action.name,
-          description: action.description,
-          annotations: {
-            title: action.title,
-            destructiveHint: action.attributes.destructive,
-            idempotentHint: action.attributes.idempotent,
-            readOnlyHint: action.attributes.readOnly,
-            openWorldHint: false
-          }
-        }))
-      };
-    });
-    server.setRequestHandler(types_js.CallToolRequestSchema, async ({ params }) => {
-      return handleErrors.handleErrors(async () => {
+      const startTime = node_perf_hooks.performance.now();
+      let errorType;
+      try {
         const { actions } = await this.actions.list({ credentials });
-        const action = actions.find((a) => a.name === params.name);
-        if (!action) {
-          throw new errors.NotFoundError(`Action "${params.name}" not found`);
-        }
-        const { output } = await this.actions.invoke({
-          id: action.id,
-          input: params.arguments,
-          credentials
-        });
         return {
-          // todo(blam): unfortunately structuredContent is not supported by most clients yet.
-          // so the validation for the output happens in the default actions registry
-          // and we return it as json text instead for now.
-          content: [
-            {
-              type: "text",
-              text: ["```json", JSON.stringify(output, null, 2), "```"].join(
-                "\n"
-              )
+          tools: actions.map((action) => ({
+            inputSchema: action.schema.input,
+            // todo(blam): this is unfortunately not supported by most clients yet.
+            // When this is provided you need to provide structuredContent instead.
+            // outputSchema: action.schema.output,
+            name: action.name,
+            description: action.description,
+            annotations: {
+              title: action.title,
+              destructiveHint: action.attributes.destructive,
+              idempotentHint: action.attributes.idempotent,
+              readOnlyHint: action.attributes.readOnly,
+              openWorldHint: false
             }
-          ]
+          }))
         };
-      });
+      } catch (err) {
+        errorType = err instanceof Error ? err.name : "Error";
+        throw err;
+      } finally {
+        const durationSeconds = (node_perf_hooks.performance.now() - startTime) / 1e3;
+        this.operationDuration.record(durationSeconds, {
+          "mcp.method.name": "tools/list",
+          ...errorType && { "error.type": errorType }
+        });
+      }
+    });
+    server.setRequestHandler(types_js.CallToolRequestSchema, async ({ params }) => {
+      const startTime = node_perf_hooks.performance.now();
+      let errorType;
+      let isError = false;
+      try {
+        const result = await handleErrors.handleErrors(async () => {
+          const { actions } = await this.actions.list({ credentials });
+          const action = actions.find((a) => a.name === params.name);
+          if (!action) {
+            throw new errors.NotFoundError(`Action "${params.name}" not found`);
+          }
+          const { output } = await this.actions.invoke({
+            id: action.id,
+            input: params.arguments,
+            credentials
+          });
+          return {
+            // todo(blam): unfortunately structuredContent is not supported by most clients yet.
+            // so the validation for the output happens in the default actions registry
+            // and we return it as json text instead for now.
+            content: [
+              {
+                type: "text",
+                text: ["```json", JSON.stringify(output, null, 2), "```"].join(
+                  "\n"
+                )
+              }
+            ]
+          };
+        });
+        isError = !!result?.isError;
+        return result;
+      } catch (err) {
+        errorType = err instanceof Error ? err.name : "Error";
+        throw err;
+      } finally {
+        const durationSeconds = (node_perf_hooks.performance.now() - startTime) / 1e3;
+        let errorAttribute = errorType;
+        if (!errorAttribute && isError) {
+          errorAttribute = "tool_error";
+        }
+        this.operationDuration.record(durationSeconds, {
+          "mcp.method.name": "tools/call",
+          "gen_ai.tool.name": params.name,
+          "gen_ai.operation.name": "execute_tool",
+          ...errorAttribute && { "error.type": errorAttribute }
+        });
+      }
     });
     return server;
   }

package/dist/services/McpService.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"McpService.cjs.js","sources":["../../src/services/McpService.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { BackstageCredentials } from '@backstage/backend-plugin-api';\nimport { Server as McpServer } from '@modelcontextprotocol/sdk/server/index.js';\nimport {\n  ListToolsRequestSchema,\n  CallToolRequestSchema,\n} from '@modelcontextprotocol/sdk/types.js';\nimport { JsonObject } from '@backstage/types';\nimport { ActionsService } from '@backstage/backend-plugin-api/alpha';\nimport { version } from '@backstage/plugin-mcp-actions-backend/package.json';\nimport { NotFoundError } from '@backstage/errors';\n\nimport { handleErrors } from './handleErrors';\n\nexport class McpService {\n  private readonly actions: ActionsService;\n\n  constructor(actions: ActionsService) {\n    this.actions = actions;\n  }\n\n  static async create({ actions }: { actions: ActionsService }) {\n    return new McpService(actions);\n  }\n\n  getServer({ credentials }: { credentials: BackstageCredentials }) {\n    const server = new McpServer(\n      {\n        name: 'backstage',\n        // TODO: this version will most likely change in the future.\n        version,\n      },\n      { capabilities: { tools: {} } },\n    );\n\n    server.setRequestHandler(ListToolsRequestSchema, async () => {\n      // TODO: switch this to be configuration based later\n      const { actions } = await this.actions.list({ credentials });\n\n      return {\n        tools: actions.map(action => ({\n          inputSchema: action.schema.input,\n          // todo(blam): this is unfortunately not supported by most clients yet.\n          // When this is provided you need to provide structuredContent instead.\n          // outputSchema: action.schema.output,\n          name: action.name,\n          description: action.description,\n          annotations: {\n            title: action.title,\n            destructiveHint: action.attributes.destructive,\n            idempotentHint: action.attributes.idempotent,\n            readOnlyHint: action.attributes.readOnly,\n            openWorldHint: false,\n          },\n        })),\n      };\n    });\n\n    server.setRequestHandler(CallToolRequestSchema, async ({ params }) => {\n      return handleErrors(async () => {\n        const { actions } = await this.actions.list({ credentials });\n        const action = actions.find(a => a.name === params.name);\n\n        if (!action) {\n          throw new NotFoundError(`Action \"${params.name}\" not found`);\n        }\n\n        const { output } = await this.actions.invoke({\n          id: action.id,\n          input: params.arguments as JsonObject,\n          credentials,\n        });\n\n        return {\n          // todo(blam): unfortunately structuredContent is not supported by most clients yet.\n          // so the validation for the output happens in the default actions registry\n          // and we return it as json text instead for now.\n          content: [\n            {\n              type: 'text',\n              text: ['```json', JSON.stringify(output, null, 2), '```'].join(\n                '\\n',\n              ),\n            },\n          ],\n        };\n      });\n    });\n\n    return server;\n  }\n}\n"],"names":["McpServer","version","ListToolsRequestSchema","CallToolRequestSchema","handleErrors","NotFoundError"],"mappings":";;;;;;;;AA4BO,MAAM,UAAA,CAAW;AAAA,EACL,OAAA;AAAA,EAEjB,YAAY,OAAA,EAAyB;AACnC,IAAA,IAAA,CAAK,OAAA,GAAU,OAAA;AAAA,EACjB;AAAA,EAEA,aAAa,MAAA,CAAO,EAAE,OAAA,EAAQ,EAAgC;AAC5D,IAAA,OAAO,IAAI,WAAW,OAAO,CAAA;AAAA,EAC/B;AAAA,EAEA,SAAA,CAAU,EAAE,WAAA,EAAY,EAA0C;AAChE,IAAA,MAAM,SAAS,IAAIA,eAAA;AAAA,MACjB;AAAA,QACE,IAAA,EAAM,WAAA;AAAA;AAAA,iBAENC;AAAA,OACF;AAAA,MACA,EAAE,YAAA,EAAc,EAAE,KAAA,EAAO,IAAG;AAAE,KAChC;AAEA,IAAA,MAAA,CAAO,iBAAA,CAAkBC,iCAAwB,YAAY;AAE3D,MAAA,MAAM,EAAE,SAAQ,GAAI,MAAM,KAAK,OAAA,CAAQ,IAAA,CAAK,EAAE,WAAA,EAAa,CAAA;AAE3D,MAAA,OAAO;AAAA,QACL,KAAA,EAAO,OAAA,CAAQ,GAAA,CAAI,CAAA,MAAA,MAAW;AAAA,UAC5B,WAAA,EAAa,OAAO,MAAA,CAAO,KAAA;AAAA;AAAA;AAAA;AAAA,UAI3B,MAAM,MAAA,CAAO,IAAA;AAAA,UACb,aAAa,MAAA,CAAO,WAAA;AAAA,UACpB,WAAA,EAAa;AAAA,YACX,OAAO,MAAA,CAAO,KAAA;AAAA,YACd,eAAA,EAAiB,OAAO,UAAA,CAAW,WAAA;AAAA,YACnC,cAAA,EAAgB,OAAO,UAAA,CAAW,UAAA;AAAA,YAClC,YAAA,EAAc,OAAO,UAAA,CAAW,QAAA;AAAA,YAChC,aAAA,EAAe;AAAA;AACjB,SACF,CAAE;AAAA,OACJ;AAAA,IACF,CAAC,CAAA;AAED,IAAA,MAAA,CAAO,iBAAA,CAAkBC,8BAAA,EAAuB,OAAO,EAAE,QAAO,KAAM;AACpE,MAAA,OAAOC,0BAAa,YAAY;AAC9B,QAAA,MAAM,EAAE,SAAQ,GAAI,MAAM,KAAK,OAAA,CAAQ,IAAA,CAAK,EAAE,WAAA,EAAa,CAAA;AAC3D,QAAA,MAAM,SAAS,OAAA,CAAQ,IAAA,CAAK,OAAK,CAAA,CAAE,IAAA,KAAS,OAAO,IAAI,CAAA;AAEvD,QAAA,IAAI,CAAC,MAAA,EAAQ;AACX,UAAA,MAAM,IAAIC,oBAAA,CAAc,CAAA,QAAA,EAAW,MAAA,CAAO,IAAI,CAAA,WAAA,CAAa,CAAA;AAAA,QAC7D;AAEA,QAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,IAAA,CAAK,QAAQ,MAAA,CAAO;AAAA,UAC3C,IAAI,MAAA,CAAO,EAAA;AAAA,UACX,OAAO,MAAA,CAAO,SAAA;AAAA,UACd;AAAA,SACD,CAAA;AAED,QAAA,OAAO;AAAA;AAAA;AAAA;AAAA,UAIL,OAAA,EAAS;AAAA,YACP;AAAA,cACE,IAAA,EAAM,MAAA;AAAA,cACN,IAAA,EAAM,CAAC,SAAA,EAAW,IAAA,CAAK,SAAA,CAAU,QAAQ,IAAA,EAAM,CAAC,CAAA,EAAG,KAAK,CAAA,CAAE,IAAA;AAAA,gBACxD;AAAA;AACF;AACF;AACF,SACF;AAAA,MACF,CAAC,CAAA;AAAA,IACH,CAAC,CAAA;AAED,IAAA,OAAO,MAAA;AAAA,EACT;AACF;;;;"}
+{"version":3,"file":"McpService.cjs.js","sources":["../../src/services/McpService.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { BackstageCredentials } from '@backstage/backend-plugin-api';\nimport { Server as McpServer } from '@modelcontextprotocol/sdk/server/index.js';\nimport {\n  ListToolsRequestSchema,\n  CallToolRequestSchema,\n} from '@modelcontextprotocol/sdk/types.js';\nimport { JsonObject } from '@backstage/types';\nimport {\n  ActionsService,\n  MetricsServiceHistogram,\n  MetricsService,\n} from '@backstage/backend-plugin-api/alpha';\nimport { version } from '@backstage/plugin-mcp-actions-backend/package.json';\nimport { NotFoundError } from '@backstage/errors';\nimport { performance } from 'node:perf_hooks';\n\nimport { handleErrors } from './handleErrors';\nimport { bucketBoundaries, McpServerOperationAttributes } from '../metrics';\n\nexport class McpService {\n  private readonly actions: ActionsService;\n  private readonly operationDuration: MetricsServiceHistogram<McpServerOperationAttributes>;\n\n  constructor(actions: ActionsService, metrics: MetricsService) {\n    this.actions = actions;\n    this.operationDuration =\n      metrics.createHistogram<McpServerOperationAttributes>(\n        'mcp.server.operation.duration',\n        {\n          description: 'MCP request duration as observed on the receiver',\n          unit: 's',\n          advice: { explicitBucketBoundaries: bucketBoundaries },\n        },\n      );\n  }\n\n  static async create({\n    actions,\n    metrics,\n  }: {\n    actions: ActionsService;\n    metrics: MetricsService;\n  }) {\n    return new McpService(actions, metrics);\n  }\n\n  getServer({ credentials }: { credentials: BackstageCredentials }) {\n    const server = new McpServer(\n      {\n        name: 'backstage',\n        // TODO: this version will most likely change in the future.\n        version,\n      },\n      { capabilities: { tools: {} } },\n    );\n\n    server.setRequestHandler(ListToolsRequestSchema, async () => {\n      const startTime = performance.now();\n      let errorType: string | undefined;\n\n      try {\n        // TODO: switch this to be configuration based later\n        const { actions } = await this.actions.list({ credentials });\n\n        return {\n          tools: actions.map(action => ({\n            inputSchema: action.schema.input,\n            // todo(blam): this is unfortunately not supported by most clients yet.\n            // When this is provided you need to provide structuredContent instead.\n            // outputSchema: action.schema.output,\n            name: action.name,\n            description: action.description,\n            annotations: {\n              title: action.title,\n              destructiveHint: action.attributes.destructive,\n              idempotentHint: action.attributes.idempotent,\n              readOnlyHint: action.attributes.readOnly,\n              openWorldHint: false,\n            },\n          })),\n        };\n      } catch (err) {\n        errorType = err instanceof Error ? err.name : 'Error';\n        throw err;\n      } finally {\n        const durationSeconds = (performance.now() - startTime) / 1000;\n\n        this.operationDuration.record(durationSeconds, {\n          'mcp.method.name': 'tools/list',\n          ...(errorType && { 'error.type': errorType }),\n        });\n      }\n    });\n\n    server.setRequestHandler(CallToolRequestSchema, async ({ params }) => {\n      const startTime = performance.now();\n      let errorType: string | undefined;\n      let isError = false;\n\n      try {\n        const result = await handleErrors(async () => {\n          const { actions } = await this.actions.list({ credentials });\n          const action = actions.find(a => a.name === params.name);\n\n          if (!action) {\n            throw new NotFoundError(`Action \"${params.name}\" not found`);\n          }\n\n          const { output } = await this.actions.invoke({\n            id: action.id,\n            input: params.arguments as JsonObject,\n            credentials,\n          });\n\n          return {\n            // todo(blam): unfortunately structuredContent is not supported by most clients yet.\n            // so the validation for the output happens in the default actions registry\n            // and we return it as json text instead for now.\n            content: [\n              {\n                type: 'text',\n                text: ['```json', JSON.stringify(output, null, 2), '```'].join(\n                  '\\n',\n                ),\n              },\n            ],\n          };\n        });\n\n        isError = !!(result as { isError?: boolean })?.isError;\n        return result;\n      } catch (err) {\n        errorType = err instanceof Error ? err.name : 'Error';\n        throw err;\n      } finally {\n        const durationSeconds = (performance.now() - startTime) / 1000;\n\n        // Determine error.type per OTel MCP spec:\n        // - Thrown exceptions use the error name\n        // - CallToolResult with isError=true uses 'tool_error'\n        let errorAttribute: string | undefined = errorType;\n        if (!errorAttribute && isError) {\n          errorAttribute = 'tool_error';\n        }\n\n        this.operationDuration.record(durationSeconds, {\n          'mcp.method.name': 'tools/call',\n          'gen_ai.tool.name': params.name,\n          'gen_ai.operation.name': 'execute_tool',\n          ...(errorAttribute && { 'error.type': errorAttribute }),\n        });\n      }\n    });\n\n    return server;\n  }\n}\n"],"names":["metrics","bucketBoundaries","McpServer","version","ListToolsRequestSchema","performance","CallToolRequestSchema","handleErrors","NotFoundError"],"mappings":";;;;;;;;;;AAkCO,MAAM,UAAA,CAAW;AAAA,EACL,OAAA;AAAA,EACA,iBAAA;AAAA,EAEjB,WAAA,CAAY,SAAyBA,SAAA,EAAyB;AAC5D,IAAA,IAAA,CAAK,OAAA,GAAU,OAAA;AACf,IAAA,IAAA,CAAK,oBACHA,SAAA,CAAQ,eAAA;AAAA,MACN,+BAAA;AAAA,MACA;AAAA,QACE,WAAA,EAAa,kDAAA;AAAA,QACb,IAAA,EAAM,GAAA;AAAA,QACN,MAAA,EAAQ,EAAE,wBAAA,EAA0BC,wBAAA;AAAiB;AACvD,KACF;AAAA,EACJ;AAAA,EAEA,aAAa,MAAA,CAAO;AAAA,IAClB,OAAA;AAAA,IACA;AAAA,GACF,EAGG;AACD,IAAA,OAAO,IAAI,UAAA,CAAW,OAAA,EAAS,OAAO,CAAA;AAAA,EACxC;AAAA,EAEA,SAAA,CAAU,EAAE,WAAA,EAAY,EAA0C;AAChE,IAAA,MAAM,SAAS,IAAIC,eAAA;AAAA,MACjB;AAAA,QACE,IAAA,EAAM,WAAA;AAAA;AAAA,iBAENC;AAAA,OACF;AAAA,MACA,EAAE,YAAA,EAAc,EAAE,KAAA,EAAO,IAAG;AAAE,KAChC;AAEA,IAAA,MAAA,CAAO,iBAAA,CAAkBC,iCAAwB,YAAY;AAC3D,MAAA,MAAM,SAAA,GAAYC,4BAAY,GAAA,EAAI;AAClC,MAAA,IAAI,SAAA;AAEJ,MAAA,IAAI;AAEF,QAAA,MAAM,EAAE,SAAQ,GAAI,MAAM,KAAK,OAAA,CAAQ,IAAA,CAAK,EAAE,WAAA,EAAa,CAAA;AAE3D,QAAA,OAAO;AAAA,UACL,KAAA,EAAO,OAAA,CAAQ,GAAA,CAAI,CAAA,MAAA,MAAW;AAAA,YAC5B,WAAA,EAAa,OAAO,MAAA,CAAO,KAAA;AAAA;AAAA;AAAA;AAAA,YAI3B,MAAM,MAAA,CAAO,IAAA;AAAA,YACb,aAAa,MAAA,CAAO,WAAA;AAAA,YACpB,WAAA,EAAa;AAAA,cACX,OAAO,MAAA,CAAO,KAAA;AAAA,cACd,eAAA,EAAiB,OAAO,UAAA,CAAW,WAAA;AAAA,cACnC,cAAA,EAAgB,OAAO,UAAA,CAAW,UAAA;AAAA,cAClC,YAAA,EAAc,OAAO,UAAA,CAAW,QAAA;AAAA,cAChC,aAAA,EAAe;AAAA;AACjB,WACF,CAAE;AAAA,SACJ;AAAA,MACF,SAAS,GAAA,EAAK;AACZ,QAAA,SAAA,GAAY,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,IAAA,GAAO,OAAA;AAC9C,QAAA,MAAM,GAAA;AAAA,MACR,CAAA,SAAE;AACA,QAAA,MAAM,eAAA,GAAA,CAAmBA,2BAAA,CAAY,GAAA,EAAI,GAAI,SAAA,IAAa,GAAA;AAE1D,QAAA,IAAA,CAAK,iBAAA,CAAkB,OAAO,eAAA,EAAiB;AAAA,UAC7C,iBAAA,EAAmB,YAAA;AAAA,UACnB,GAAI,SAAA,IAAa,EAAE,YAAA,EAAc,SAAA;AAAU,SAC5C,CAAA;AAAA,MACH;AAAA,IACF,CAAC,CAAA;AAED,IAAA,MAAA,CAAO,iBAAA,CAAkBC,8BAAA,EAAuB,OAAO,EAAE,QAAO,KAAM;AACpE,MAAA,MAAM,SAAA,GAAYD,4BAAY,GAAA,EAAI;AAClC,MAAA,IAAI,SAAA;AACJ,MAAA,IAAI,OAAA,GAAU,KAAA;AAEd,MAAA,IAAI;AACF,QAAA,MAAM,MAAA,GAAS,MAAME,yBAAA,CAAa,YAAY;AAC5C,UAAA,MAAM,EAAE,SAAQ,GAAI,MAAM,KAAK,OAAA,CAAQ,IAAA,CAAK,EAAE,WAAA,EAAa,CAAA;AAC3D,UAAA,MAAM,SAAS,OAAA,CAAQ,IAAA,CAAK,OAAK,CAAA,CAAE,IAAA,KAAS,OAAO,IAAI,CAAA;AAEvD,UAAA,IAAI,CAAC,MAAA,EAAQ;AACX,YAAA,MAAM,IAAIC,oBAAA,CAAc,CAAA,QAAA,EAAW,MAAA,CAAO,IAAI,CAAA,WAAA,CAAa,CAAA;AAAA,UAC7D;AAEA,UAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,IAAA,CAAK,QAAQ,MAAA,CAAO;AAAA,YAC3C,IAAI,MAAA,CAAO,EAAA;AAAA,YACX,OAAO,MAAA,CAAO,SAAA;AAAA,YACd;AAAA,WACD,CAAA;AAED,UAAA,OAAO;AAAA;AAAA;AAAA;AAAA,YAIL,OAAA,EAAS;AAAA,cACP;AAAA,gBACE,IAAA,EAAM,MAAA;AAAA,gBACN,IAAA,EAAM,CAAC,SAAA,EAAW,IAAA,CAAK,SAAA,CAAU,QAAQ,IAAA,EAAM,CAAC,CAAA,EAAG,KAAK,CAAA,CAAE,IAAA;AAAA,kBACxD;AAAA;AACF;AACF;AACF,WACF;AAAA,QACF,CAAC,CAAA;AAED,QAAA,OAAA,GAAU,CAAC,CAAE,MAAA,EAAkC,OAAA;AAC/C,QAAA,OAAO,MAAA;AAAA,MACT,SAAS,GAAA,EAAK;AACZ,QAAA,SAAA,GAAY,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,IAAA,GAAO,OAAA;AAC9C,QAAA,MAAM,GAAA;AAAA,MACR,CAAA,SAAE;AACA,QAAA,MAAM,eAAA,GAAA,CAAmBH,2BAAA,CAAY,GAAA,EAAI,GAAI,SAAA,IAAa,GAAA;AAK1D,QAAA,IAAI,cAAA,GAAqC,SAAA;AACzC,QAAA,IAAI,CAAC,kBAAkB,OAAA,EAAS;AAC9B,UAAA,cAAA,GAAiB,YAAA;AAAA,QACnB;AAEA,QAAA,IAAA,CAAK,iBAAA,CAAkB,OAAO,eAAA,EAAiB;AAAA,UAC7C,iBAAA,EAAmB,YAAA;AAAA,UACnB,oBAAoB,MAAA,CAAO,IAAA;AAAA,UAC3B,uBAAA,EAAyB,cAAA;AAAA,UACzB,GAAI,cAAA,IAAkB,EAAE,YAAA,EAAc,cAAA;AAAe,SACtD,CAAA;AAAA,MACH;AAAA,IACF,CAAC,CAAA;AAED,IAAA,OAAO,MAAA;AAAA,EACT;AACF;;;;"}

package/dist/services/handleErrors.cjs.js

@@ -15,7 +15,7 @@ const knownErrors = /* @__PURE__ */ new Set([
 ]);
 function extractCause(err) {
   if ((err.name === "ResponseError" || err instanceof errors.ForwardedError) && errors.isError(err.cause)) {
-    return err.cause;
+    return extractCause(err.cause);
   }
   return err;
 }

package/dist/services/handleErrors.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"handleErrors.cjs.js","sources":["../../src/services/handleErrors.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  ErrorLike,\n  ForwardedError,\n  isError,\n  serializeError,\n} from '@backstage/errors';\n\nimport { Server as McpServer } from '@modelcontextprotocol/sdk/server/index.js';\n\nconst knownErrors = new Set([\n  'InputError',\n  'AuthenticationError',\n  'NotAllowedError',\n  'NotFoundError',\n  'ConflictError',\n  'NotModifiedError',\n  'NotImplementedError',\n  'ResponseError',\n  'ServiceUnavailableError',\n]);\n\n// Extracts the cause error, if the provided error is `ResponseError` or\n// `ForwardedError` with a cause.\nfunction extractCause(err: ErrorLike): ErrorLike {\n  if (\n    (err.name === 'ResponseError' || err instanceof ForwardedError) &&\n    isError(err.cause)\n  ) {\n    return err.cause;\n  }\n  return err;\n}\n\n/**\n * Takes a value expected to be an object, and returns a description of the\n * error to return to the MCP client, if the error is a known Backstage error.\n *\n * Re-throws the original error otherwise\n */\nfunction describeError(err: unknown): string {\n  if (err instanceof Error) {\n    const serialized = serializeError(err);\n\n    const { name, message } = extractCause(serialized);\n\n    if (knownErrors.has(name)) {\n      return `${name}: ${message}`;\n    }\n  }\n\n  throw err;\n}\n\ntype RequestResultType = ReturnType<\n  Parameters<McpServer['setRequestHandler']>[1]\n>;\n/**\n * Wraps a request function with an error handler that turns known Backstage\n * errors into user-friendly messages, instead of failing the request\n * generically with a 500.\n */\nexport async function handleErrors(\n  fn: () => RequestResultType | Promise<RequestResultType>,\n): Promise<RequestResultType> {\n  try {\n    return await fn();\n  } catch (err) {\n    // This will rethrow if the error is not a known Backstage error\n    const description = describeError(err);\n    return {\n      content: [{ type: 'text', text: description }],\n      isError: true,\n    };\n  }\n}\n"],"names":["ForwardedError","isError","serializeError"],"mappings":";;;;AAyBA,MAAM,WAAA,uBAAkB,GAAA,CAAI;AAAA,EAC1B,YAAA;AAAA,EACA,qBAAA;AAAA,EACA,iBAAA;AAAA,EACA,eAAA;AAAA,EACA,eAAA;AAAA,EACA,kBAAA;AAAA,EACA,qBAAA;AAAA,EACA,eAAA;AAAA,EACA;AACF,CAAC,CAAA;AAID,SAAS,aAAa,GAAA,EAA2B;AAC/C,EAAA,IAAA,CACG,GAAA,CAAI,SAAS,eAAA,IAAmB,GAAA,YAAeA,0BAChDC,cAAA,CAAQ,GAAA,CAAI,KAAK,CAAA,EACjB;AACA,IAAA,OAAO,GAAA,CAAI,KAAA;AAAA,EACb;AACA,EAAA,OAAO,GAAA;AACT;AAQA,SAAS,cAAc,GAAA,EAAsB;AAC3C,EAAA,IAAI,eAAe,KAAA,EAAO;AACxB,IAAA,MAAM,UAAA,GAAaC,sBAAe,GAAG,CAAA;AAErC,IAAA,MAAM,EAAE,IAAA,EAAM,OAAA,EAAQ,GAAI,aAAa,UAAU,CAAA;AAEjD,IAAA,IAAI,WAAA,CAAY,GAAA,CAAI,IAAI,CAAA,EAAG;AACzB,MAAA,OAAO,CAAA,EAAG,IAAI,CAAA,EAAA,EAAK,OAAO,CAAA,CAAA;AAAA,IAC5B;AAAA,EACF;AAEA,EAAA,MAAM,GAAA;AACR;AAUA,eAAsB,aACpB,EAAA,EAC4B;AAC5B,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,EAAA,EAAG;AAAA,EAClB,SAAS,GAAA,EAAK;AAEZ,IAAA,MAAM,WAAA,GAAc,cAAc,GAAG,CAAA;AACrC,IAAA,OAAO;AAAA,MACL,SAAS,CAAC,EAAE,MAAM,MAAA,EAAQ,IAAA,EAAM,aAAa,CAAA;AAAA,MAC7C,OAAA,EAAS;AAAA,KACX;AAAA,EACF;AACF;;;;"}
+{"version":3,"file":"handleErrors.cjs.js","sources":["../../src/services/handleErrors.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  ErrorLike,\n  ForwardedError,\n  isError,\n  serializeError,\n} from '@backstage/errors';\n\nimport { Server as McpServer } from '@modelcontextprotocol/sdk/server/index.js';\n\nconst knownErrors = new Set([\n  'InputError',\n  'AuthenticationError',\n  'NotAllowedError',\n  'NotFoundError',\n  'ConflictError',\n  'NotModifiedError',\n  'NotImplementedError',\n  'ResponseError',\n  'ServiceUnavailableError',\n]);\n\n// Recursively extracts the innermost cause from ResponseError or\n// ForwardedError wrappers to surface the original error.\nfunction extractCause(err: ErrorLike): ErrorLike {\n  if (\n    (err.name === 'ResponseError' || err instanceof ForwardedError) &&\n    isError(err.cause)\n  ) {\n    return extractCause(err.cause);\n  }\n  return err;\n}\n\n/**\n * Takes a value expected to be an object, and returns a description of the\n * error to return to the MCP client, if the error is a known Backstage error.\n *\n * Re-throws the original error otherwise\n */\nfunction describeError(err: unknown): string {\n  if (err instanceof Error) {\n    const serialized = serializeError(err);\n\n    const { name, message } = extractCause(serialized);\n\n    if (knownErrors.has(name)) {\n      return `${name}: ${message}`;\n    }\n  }\n\n  throw err;\n}\n\ntype RequestResultType = ReturnType<\n  Parameters<McpServer['setRequestHandler']>[1]\n>;\n/**\n * Wraps a request function with an error handler that turns known Backstage\n * errors into user-friendly messages, instead of failing the request\n * generically with a 500.\n */\nexport async function handleErrors(\n  fn: () => RequestResultType | Promise<RequestResultType>,\n): Promise<RequestResultType> {\n  try {\n    return await fn();\n  } catch (err) {\n    // This will rethrow if the error is not a known Backstage error\n    const description = describeError(err);\n    return {\n      content: [{ type: 'text', text: description }],\n      isError: true,\n    };\n  }\n}\n"],"names":["ForwardedError","isError","serializeError"],"mappings":";;;;AAyBA,MAAM,WAAA,uBAAkB,GAAA,CAAI;AAAA,EAC1B,YAAA;AAAA,EACA,qBAAA;AAAA,EACA,iBAAA;AAAA,EACA,eAAA;AAAA,EACA,eAAA;AAAA,EACA,kBAAA;AAAA,EACA,qBAAA;AAAA,EACA,eAAA;AAAA,EACA;AACF,CAAC,CAAA;AAID,SAAS,aAAa,GAAA,EAA2B;AAC/C,EAAA,IAAA,CACG,GAAA,CAAI,SAAS,eAAA,IAAmB,GAAA,YAAeA,0BAChDC,cAAA,CAAQ,GAAA,CAAI,KAAK,CAAA,EACjB;AACA,IAAA,OAAO,YAAA,CAAa,IAAI,KAAK,CAAA;AAAA,EAC/B;AACA,EAAA,OAAO,GAAA;AACT;AAQA,SAAS,cAAc,GAAA,EAAsB;AAC3C,EAAA,IAAI,eAAe,KAAA,EAAO;AACxB,IAAA,MAAM,UAAA,GAAaC,sBAAe,GAAG,CAAA;AAErC,IAAA,MAAM,EAAE,IAAA,EAAM,OAAA,EAAQ,GAAI,aAAa,UAAU,CAAA;AAEjD,IAAA,IAAI,WAAA,CAAY,GAAA,CAAI,IAAI,CAAA,EAAG;AACzB,MAAA,OAAO,CAAA,EAAG,IAAI,CAAA,EAAA,EAAK,OAAO,CAAA,CAAA;AAAA,IAC5B;AAAA,EACF;AAEA,EAAA,MAAM,GAAA;AACR;AAUA,eAAsB,aACpB,EAAA,EAC4B;AAC5B,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,EAAA,EAAG;AAAA,EAClB,SAAS,GAAA,EAAK;AAEZ,IAAA,MAAM,WAAA,GAAc,cAAc,GAAG,CAAA;AACrC,IAAA,OAAO;AAAA,MACL,SAAS,CAAC,EAAE,MAAM,MAAA,EAAQ,IAAA,EAAM,aAAa,CAAA;AAAA,MAC7C,OAAA,EAAS;AAAA,KACX;AAAA,EACF;AACF;;;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@backstage/plugin-mcp-actions-backend",
-  "version": "0.1.9",
+  "version": "0.1.10-next.1",
   "backstage": {
     "role": "backend-plugin",
     "pluginId": "mcp-actions",
@@ -37,11 +37,11 @@
     "test": "backstage-cli package test"
   },
   "dependencies": {
-    "@backstage/backend-plugin-api": "^1.7.0",
-    "@backstage/catalog-client": "^1.13.0",
-    "@backstage/errors": "^1.2.7",
-    "@backstage/plugin-catalog-node": "^2.0.0",
-    "@backstage/types": "^1.2.2",
+    "@backstage/backend-plugin-api": "1.7.1-next.0",
+    "@backstage/catalog-client": "1.14.0-next.1",
+    "@backstage/errors": "1.2.7",
+    "@backstage/plugin-catalog-node": "2.1.0-next.1",
+    "@backstage/types": "1.2.2",
     "@cfworker/json-schema": "^4.1.1",
     "@modelcontextprotocol/sdk": "^1.25.2",
     "express": "^4.22.0",
@@ -49,9 +49,9 @@
     "zod": "^3.25.76"
   },
   "devDependencies": {
-    "@backstage/backend-defaults": "^0.15.2",
-    "@backstage/backend-test-utils": "^1.11.0",
-    "@backstage/cli": "^0.35.4",
+    "@backstage/backend-defaults": "0.16.0-next.1",
+    "@backstage/backend-test-utils": "1.11.1-next.1",
+    "@backstage/cli": "0.36.0-next.1",
     "@types/express": "^4.17.6",
     "@types/supertest": "^2.0.8",
     "supertest": "^7.0.0"