@frontmcp/sdk 0.12.2 → 1.0.0-beta.10

package/front-mcp/front-mcp.providers.d.ts

@@ -14,7 +14,7 @@ export declare function createMcpGlobalProviders(metadata: FrontMcpConfigType):
         }[] | undefined;
     };
     providers: import("@frontmcp/di").Type<unknown>[];
-    tools: import("@frontmcp/di").Type<unknown>[];
+    tools: (string | import("@frontmcp/di").Type<unknown>)[];
     resources: import("@frontmcp/di").Type<unknown>[];
     skills: import("@frontmcp/di").Type<unknown>[];
     plugins: import("@frontmcp/di").Type<unknown>[];
@@ -251,6 +251,9 @@ export declare function createMcpGlobalProviders(metadata: FrontMcpConfigType):
             secret: string;
         } | undefined;
     } | undefined;
+    ui?: {
+        cdnOverrides?: Record<string, string> | undefined;
+    } | undefined;
     jobs?: {
         enabled: boolean;
         store?: {
@@ -282,6 +285,65 @@ export declare function createMcpGlobalProviders(metadata: FrontMcpConfigType):
             keyPrefix?: string | undefined;
         } | undefined;
     } | undefined;
+    loader?: {
+        url?: string | undefined;
+        registryUrl?: string | undefined;
+        token?: string | undefined;
+        tokenEnvVar?: string | undefined;
+    } | undefined;
+    throttle?: {
+        enabled: boolean;
+        keyPrefix: string;
+        storage?: {
+            [x: string]: unknown;
+        } | undefined;
+        global?: {
+            maxRequests: number;
+            windowMs: number;
+            partitionBy: "session" | "global" | ((ctx: {
+                sessionId: string;
+                clientIp?: string;
+                userId?: string;
+            }) => string) | "ip" | "userId";
+        } | undefined;
+        globalConcurrency?: {
+            maxConcurrent: number;
+            queueTimeoutMs: number;
+            partitionBy: "session" | "global" | "ip" | "userId" | ((ctx: {
+                sessionId: string;
+                clientIp?: string;
+                userId?: string;
+            }) => string);
+        } | undefined;
+        defaultRateLimit?: {
+            maxRequests: number;
+            windowMs: number;
+            partitionBy: "session" | "global" | "ip" | "userId" | ((ctx: {
+                sessionId: string;
+                clientIp?: string;
+                userId?: string;
+            }) => string);
+        } | undefined;
+        defaultConcurrency?: {
+            maxConcurrent: number;
+            queueTimeoutMs: number;
+            partitionBy: "session" | "global" | "ip" | "userId" | ((ctx: {
+                sessionId: string;
+                clientIp?: string;
+                userId?: string;
+            }) => string);
+        } | undefined;
+        defaultTimeout?: {
+            executeMs: number;
+        } | undefined;
+        ipFilter?: {
+            defaultAction: "deny" | "allow";
+            trustProxy: boolean;
+            trustedProxyDepth: number;
+            allowList?: string[] | undefined;
+            denyList?: string[] | undefined;
+        } | undefined;
+    } | undefined;
     auth?: {
         mode: "public";
         sessionTtl: number;
@@ -297,9 +359,21 @@ export declare function createMcpGlobalProviders(metadata: FrontMcpConfigType):
         } | undefined;
         signKey?: Uint8Array<ArrayBuffer> | import("libs/auth/dist/common/jwt.types").JWK | undefined;
     } | {
+        requiredScopes: string[];
+        allowAnonymous: boolean;
+        anonymousScopes: string[];
+        provider: string;
         mode: "transparent";
-        remote: {
-            provider: string;
+        expectedAudience?: string | string[] | undefined;
+        publicAccess?: {
+            tools: string[] | "all";
+            prompts: string[] | "all";
+            rateLimit: number;
+        } | undefined;
+        clientId?: string | undefined;
+        clientSecret?: string | undefined;
+        scopes?: string[] | undefined;
+        providerConfig?: {
             dcrEnabled: boolean;
             name?: string | undefined;
             id?: string | undefined;
@@ -307,29 +381,14 @@ export declare function createMcpGlobalProviders(metadata: FrontMcpConfigType):
                 keys: import("libs/auth/dist/common/jwt.types").JWK[];
             } | undefined;
             jwksUri?: string | undefined;
-            clientId?: string | undefined;
-            clientSecret?: string | undefined;
-            scopes?: string[] | undefined;
             authEndpoint?: string | undefined;
             tokenEndpoint?: string | undefined;
             registrationEndpoint?: string | undefined;
             userInfoEndpoint?: string | undefined;
-        };
-        requiredScopes: string[];
-        allowAnonymous: boolean;
-        anonymousScopes: string[];
-        expectedAudience?: string | string[] | undefined;
-        publicAccess?: {
-            tools: string[] | "all";
-            prompts: string[] | "all";
-            rateLimit: number;
         } | undefined;
     } | {
-        tokenStorage: {
-            type: "memory";
-        } | {
-            type: "redis";
-            config: {
+        tokenStorage: "memory" | {
+            redis: {
                 host: string;
                 port: number;
                 db: number;
@@ -341,8 +400,7 @@ export declare function createMcpGlobalProviders(metadata: FrontMcpConfigType):
         };
         allowDefaultPublic: boolean;
         anonymousScopes: string[];
-        mode: "orchestrated";
-        type: "local";
+        mode: "local";
         local?: {
             signKey?: Uint8Array<ArrayBuffer> | import("libs/auth/dist/common/jwt.types").JWK | undefined;
             jwks?: {
@@ -412,11 +470,8 @@ export declare function createMcpGlobalProviders(metadata: FrontMcpConfigType):
             } | undefined;
         } | undefined;
     } | {
-        tokenStorage: {
-            type: "memory";
-        } | {
-            type: "redis";
-            config: {
+        tokenStorage: "memory" | {
+            redis: {
                 host: string;
                 port: number;
                 db: number;
@@ -428,25 +483,8 @@ export declare function createMcpGlobalProviders(metadata: FrontMcpConfigType):
         };
         allowDefaultPublic: boolean;
         anonymousScopes: string[];
-        mode: "orchestrated";
-        type: "remote";
-        remote: {
-            provider: string;
-            dcrEnabled: boolean;
-            name?: string | undefined;
-            id?: string | undefined;
-            jwks?: {
-                keys: import("libs/auth/dist/common/jwt.types").JWK[];
-            } | undefined;
-            jwksUri?: string | undefined;
-            clientId?: string | undefined;
-            clientSecret?: string | undefined;
-            scopes?: string[] | undefined;
-            authEndpoint?: string | undefined;
-            tokenEndpoint?: string | undefined;
-            registrationEndpoint?: string | undefined;
-            userInfoEndpoint?: string | undefined;
-        };
+        provider: string;
+        mode: "remote";
         local?: {
             signKey?: Uint8Array<ArrayBuffer> | import("libs/auth/dist/common/jwt.types").JWK | undefined;
             jwks?: {
@@ -515,6 +553,22 @@ export declare function createMcpGlobalProviders(metadata: FrontMcpConfigType):
                 maxRedirects: number;
             } | undefined;
         } | undefined;
+        clientId?: string | undefined;
+        clientSecret?: string | undefined;
+        scopes?: string[] | undefined;
+        providerConfig?: {
+            dcrEnabled: boolean;
+            name?: string | undefined;
+            id?: string | undefined;
+            jwks?: {
+                keys: import("libs/auth/dist/common/jwt.types").JWK[];
+            } | undefined;
+            jwksUri?: string | undefined;
+            authEndpoint?: string | undefined;
+            tokenEndpoint?: string | undefined;
+            registrationEndpoint?: string | undefined;
+            userInfoEndpoint?: string | undefined;
+        } | undefined;
     } | undefined;
 } | {
     info: {
@@ -530,7 +584,7 @@ export declare function createMcpGlobalProviders(metadata: FrontMcpConfigType):
         }[] | undefined;
     };
     providers: import("@frontmcp/di").Type<unknown>[];
-    tools: import("@frontmcp/di").Type<unknown>[];
+    tools: (string | import("@frontmcp/di").Type<unknown>)[];
     resources: import("@frontmcp/di").Type<unknown>[];
     skills: import("@frontmcp/di").Type<unknown>[];
     plugins: import("@frontmcp/di").Type<unknown>[];
@@ -767,6 +821,9 @@ export declare function createMcpGlobalProviders(metadata: FrontMcpConfigType):
             secret: string;
         } | undefined;
     } | undefined;
+    ui?: {
+        cdnOverrides?: Record<string, string> | undefined;
+    } | undefined;
     jobs?: {
         enabled: boolean;
         store?: {
@@ -798,58 +855,110 @@ export declare function createMcpGlobalProviders(metadata: FrontMcpConfigType):
             keyPrefix?: string | undefined;
         } | undefined;
     } | undefined;
-    auth?: undefined;
-}> | import("../common").ProviderFactoryType<FrontMcpServer, readonly [import("@frontmcp/di").Reference<{
-    info: {
-        name: string;
-        version: string;
-        title?: string | undefined;
-        websiteUrl?: string | undefined;
-        icons?: {
-            src: string;
-            mimeType?: string | undefined;
-            sizes?: string[] | undefined;
-            theme?: "light" | "dark" | undefined;
-        }[] | undefined;
-    };
-    providers: import("@frontmcp/di").Type<unknown>[];
-    tools: import("@frontmcp/di").Type<unknown>[];
-    resources: import("@frontmcp/di").Type<unknown>[];
-    skills: import("@frontmcp/di").Type<unknown>[];
-    plugins: import("@frontmcp/di").Type<unknown>[];
-    apps: import("@frontmcp/di").Type<unknown>[];
-    serve: boolean;
-    transport: {
-        sessionMode: "stateful" | "stateless" | import("zod/v4/core").$InferOuterFunctionType<import("zod/v4/core").$ZodFunctionArgs, import("zod/v4/core").$ZodFunctionOut>;
-        protocol: "modern" | "legacy" | "stateless-api" | "full" | {
-            sse?: boolean | undefined;
-            streamable?: boolean | undefined;
-            json?: boolean | undefined;
-            stateless?: boolean | undefined;
-            legacy?: boolean | undefined;
-            strictSession?: boolean | undefined;
-        };
-        distributedMode: boolean | "auto";
-        platformDetection?: {
-            customOnly: boolean;
-            mappings?: {
-                pattern: string | RegExp;
-                platform: "unknown" | "openai" | "claude" | "gemini" | "cursor" | "continue" | "cody" | "generic-mcp" | "ext-apps";
-            }[] | undefined;
+    loader?: {
+        url?: string | undefined;
+        registryUrl?: string | undefined;
+        token?: string | undefined;
+        tokenEnvVar?: string | undefined;
+    } | undefined;
+    throttle?: {
+        enabled: boolean;
+        keyPrefix: string;
+        storage?: {
+            [x: string]: unknown;
+        } | undefined;
+        global?: {
+            maxRequests: number;
+            windowMs: number;
+            partitionBy: "session" | "global" | ((ctx: {
+                sessionId: string;
+                clientIp?: string;
+                userId?: string;
+            }) => string) | "ip" | "userId";
+        } | undefined;
+        globalConcurrency?: {
+            maxConcurrent: number;
+            queueTimeoutMs: number;
+            partitionBy: "session" | "global" | "ip" | "userId" | ((ctx: {
+                sessionId: string;
+                clientIp?: string;
+                userId?: string;
+            }) => string);
+        } | undefined;
+        defaultRateLimit?: {
+            maxRequests: number;
+            windowMs: number;
+            partitionBy: "session" | "global" | "ip" | "userId" | ((ctx: {
+                sessionId: string;
+                clientIp?: string;
+                userId?: string;
+            }) => string);
+        } | undefined;
+        defaultConcurrency?: {
+            maxConcurrent: number;
+            queueTimeoutMs: number;
+            partitionBy: "session" | "global" | "ip" | "userId" | ((ctx: {
+                sessionId: string;
+                clientIp?: string;
+                userId?: string;
+            }) => string);
+        } | undefined;
+        defaultTimeout?: {
+            executeMs: number;
+        } | undefined;
+        ipFilter?: {
+            defaultAction: "deny" | "allow";
+            trustProxy: boolean;
+            trustedProxyDepth: number;
+            allowList?: string[] | undefined;
+            denyList?: string[] | undefined;
         } | undefined;
-        persistence?: false | {
-            defaultTtlMs: number;
-            redis?: {
-                provider: "redis";
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            } | {
-                provider: "redis";
+    } | undefined;
+    auth?: {
+        mode: "public";
+        sessionTtl: number;
+        anonymousScopes: string[];
+        issuer?: string | undefined;
+        publicAccess?: {
+            tools: string[] | "all";
+            prompts: string[] | "all";
+            rateLimit: number;
+        } | undefined;
+        jwks?: {
+            keys: import("libs/auth/dist/common/jwt.types").JWK[];
+        } | undefined;
+        signKey?: Uint8Array<ArrayBuffer> | import("libs/auth/dist/common/jwt.types").JWK | undefined;
+    } | {
+        requiredScopes: string[];
+        allowAnonymous: boolean;
+        anonymousScopes: string[];
+        provider: string;
+        mode: "transparent";
+        expectedAudience?: string | string[] | undefined;
+        publicAccess?: {
+            tools: string[] | "all";
+            prompts: string[] | "all";
+            rateLimit: number;
+        } | undefined;
+        clientId?: string | undefined;
+        clientSecret?: string | undefined;
+        scopes?: string[] | undefined;
+        providerConfig?: {
+            dcrEnabled: boolean;
+            name?: string | undefined;
+            id?: string | undefined;
+            jwks?: {
+                keys: import("libs/auth/dist/common/jwt.types").JWK[];
+            } | undefined;
+            jwksUri?: string | undefined;
+            authEndpoint?: string | undefined;
+            tokenEndpoint?: string | undefined;
+            registrationEndpoint?: string | undefined;
+            userInfoEndpoint?: string | undefined;
+        } | undefined;
+    } | {
+        tokenStorage: "memory" | {
+            redis: {
                 host: string;
                 port: number;
                 db: number;
@@ -857,31 +966,82 @@ export declare function createMcpGlobalProviders(metadata: FrontMcpConfigType):
                 keyPrefix: string;
                 defaultTtlMs: number;
                 password?: string | undefined;
-            } | {
-                provider: "vercel-kv";
-                keyPrefix: string;
-                defaultTtlMs: number;
-                url?: string | undefined;
-                token?: string | undefined;
+            };
+        };
+        allowDefaultPublic: boolean;
+        anonymousScopes: string[];
+        mode: "local";
+        local?: {
+            signKey?: Uint8Array<ArrayBuffer> | import("libs/auth/dist/common/jwt.types").JWK | undefined;
+            jwks?: {
+                keys: import("libs/auth/dist/common/jwt.types").JWK[];
             } | undefined;
+            issuer?: string | undefined;
         } | undefined;
-        providerCaching?: boolean | undefined;
-        eventStore?: {
+        publicAccess?: {
+            tools: string[] | "all";
+            prompts: string[] | "all";
+            rateLimit: number;
+        } | undefined;
+        consent?: {
             enabled: boolean;
-            provider: "memory" | "redis";
-            maxEvents: number;
-            ttlMs: number;
-            redis?: {
-                provider: "redis";
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
+            groupByApp: boolean;
+            showDescriptions: boolean;
+            allowSelectAll: boolean;
+            requireSelection: boolean;
+            rememberConsent: boolean;
+            customMessage?: string | undefined;
+            excludedTools?: string[] | undefined;
+            defaultSelectedTools?: string[] | undefined;
+        } | undefined;
+        federatedAuth?: {
+            stateValidation: "format" | "strict";
+        } | undefined;
+        refresh?: {
+            enabled: boolean;
+            skewSeconds: number;
+        } | undefined;
+        expectedAudience?: string | string[] | undefined;
+        incrementalAuth?: {
+            enabled: boolean;
+            skippedAppBehavior: "anonymous" | "require-auth";
+            allowSkip: boolean;
+            showAllAppsAtOnce: boolean;
+        } | undefined;
+        cimd?: {
+            enabled: boolean;
+            cache?: {
+                type: "memory" | "redis";
                 defaultTtlMs: number;
-                password?: string | undefined;
-            } | {
-                provider: "redis";
+                maxTtlMs: number;
+                minTtlMs: number;
+                redis?: {
+                    keyPrefix: string;
+                    url?: string | undefined;
+                    host?: string | undefined;
+                    port?: number | undefined;
+                    password?: string | undefined;
+                    db?: number | undefined;
+                    tls?: boolean | undefined;
+                } | undefined;
+            } | undefined;
+            security?: {
+                blockPrivateIPs: boolean;
+                warnOnLocalhostRedirects: boolean;
+                allowInsecureForTesting: boolean;
+                allowedDomains?: string[] | undefined;
+                blockedDomains?: string[] | undefined;
+            } | undefined;
+            network?: {
+                timeoutMs: number;
+                maxResponseSizeBytes: number;
+                redirectPolicy: "deny" | "same-origin" | "allow";
+                maxRedirects: number;
+            } | undefined;
+        } | undefined;
+    } | {
+        tokenStorage: "memory" | {
+            redis: {
                 host: string;
                 port: number;
                 db: number;
@@ -889,19 +1049,200 @@ export declare function createMcpGlobalProviders(metadata: FrontMcpConfigType):
                 keyPrefix: string;
                 defaultTtlMs: number;
                 password?: string | undefined;
-            } | {
-                provider: "vercel-kv";
-                keyPrefix: string;
-                defaultTtlMs: number;
-                url?: string | undefined;
-                token?: string | undefined;
+            };
+        };
+        allowDefaultPublic: boolean;
+        anonymousScopes: string[];
+        provider: string;
+        mode: "remote";
+        local?: {
+            signKey?: Uint8Array<ArrayBuffer> | import("libs/auth/dist/common/jwt.types").JWK | undefined;
+            jwks?: {
+                keys: import("libs/auth/dist/common/jwt.types").JWK[];
             } | undefined;
+            issuer?: string | undefined;
         } | undefined;
-    };
-    splitByApp: false;
-    http?: {
-        port: number;
-        entryPath: string;
+        publicAccess?: {
+            tools: string[] | "all";
+            prompts: string[] | "all";
+            rateLimit: number;
+        } | undefined;
+        consent?: {
+            enabled: boolean;
+            groupByApp: boolean;
+            showDescriptions: boolean;
+            allowSelectAll: boolean;
+            requireSelection: boolean;
+            rememberConsent: boolean;
+            customMessage?: string | undefined;
+            excludedTools?: string[] | undefined;
+            defaultSelectedTools?: string[] | undefined;
+        } | undefined;
+        federatedAuth?: {
+            stateValidation: "format" | "strict";
+        } | undefined;
+        refresh?: {
+            enabled: boolean;
+            skewSeconds: number;
+        } | undefined;
+        expectedAudience?: string | string[] | undefined;
+        incrementalAuth?: {
+            enabled: boolean;
+            skippedAppBehavior: "anonymous" | "require-auth";
+            allowSkip: boolean;
+            showAllAppsAtOnce: boolean;
+        } | undefined;
+        cimd?: {
+            enabled: boolean;
+            cache?: {
+                type: "memory" | "redis";
+                defaultTtlMs: number;
+                maxTtlMs: number;
+                minTtlMs: number;
+                redis?: {
+                    keyPrefix: string;
+                    url?: string | undefined;
+                    host?: string | undefined;
+                    port?: number | undefined;
+                    password?: string | undefined;
+                    db?: number | undefined;
+                    tls?: boolean | undefined;
+                } | undefined;
+            } | undefined;
+            security?: {
+                blockPrivateIPs: boolean;
+                warnOnLocalhostRedirects: boolean;
+                allowInsecureForTesting: boolean;
+                allowedDomains?: string[] | undefined;
+                blockedDomains?: string[] | undefined;
+            } | undefined;
+            network?: {
+                timeoutMs: number;
+                maxResponseSizeBytes: number;
+                redirectPolicy: "deny" | "same-origin" | "allow";
+                maxRedirects: number;
+            } | undefined;
+        } | undefined;
+        clientId?: string | undefined;
+        clientSecret?: string | undefined;
+        scopes?: string[] | undefined;
+        providerConfig?: {
+            dcrEnabled: boolean;
+            name?: string | undefined;
+            id?: string | undefined;
+            jwks?: {
+                keys: import("libs/auth/dist/common/jwt.types").JWK[];
+            } | undefined;
+            jwksUri?: string | undefined;
+            authEndpoint?: string | undefined;
+            tokenEndpoint?: string | undefined;
+            registrationEndpoint?: string | undefined;
+            userInfoEndpoint?: string | undefined;
+        } | undefined;
+    } | undefined;
+}> | import("../common").ProviderFactoryType<FrontMcpServer, readonly [import("@frontmcp/di").Reference<{
+    info: {
+        name: string;
+        version: string;
+        title?: string | undefined;
+        websiteUrl?: string | undefined;
+        icons?: {
+            src: string;
+            mimeType?: string | undefined;
+            sizes?: string[] | undefined;
+            theme?: "light" | "dark" | undefined;
+        }[] | undefined;
+    };
+    providers: import("@frontmcp/di").Type<unknown>[];
+    tools: (string | import("@frontmcp/di").Type<unknown>)[];
+    resources: import("@frontmcp/di").Type<unknown>[];
+    skills: import("@frontmcp/di").Type<unknown>[];
+    plugins: import("@frontmcp/di").Type<unknown>[];
+    apps: import("@frontmcp/di").Type<unknown>[];
+    serve: boolean;
+    transport: {
+        sessionMode: "stateful" | "stateless" | import("zod/v4/core").$InferOuterFunctionType<import("zod/v4/core").$ZodFunctionArgs, import("zod/v4/core").$ZodFunctionOut>;
+        protocol: "modern" | "legacy" | "stateless-api" | "full" | {
+            sse?: boolean | undefined;
+            streamable?: boolean | undefined;
+            json?: boolean | undefined;
+            stateless?: boolean | undefined;
+            legacy?: boolean | undefined;
+            strictSession?: boolean | undefined;
+        };
+        distributedMode: boolean | "auto";
+        platformDetection?: {
+            customOnly: boolean;
+            mappings?: {
+                pattern: string | RegExp;
+                platform: "unknown" | "openai" | "claude" | "gemini" | "cursor" | "continue" | "cody" | "generic-mcp" | "ext-apps";
+            }[] | undefined;
+        } | undefined;
+        persistence?: false | {
+            defaultTtlMs: number;
+            redis?: {
+                provider: "redis";
+                host: string;
+                port: number;
+                db: number;
+                tls: boolean;
+                keyPrefix: string;
+                defaultTtlMs: number;
+                password?: string | undefined;
+            } | {
+                provider: "redis";
+                host: string;
+                port: number;
+                db: number;
+                tls: boolean;
+                keyPrefix: string;
+                defaultTtlMs: number;
+                password?: string | undefined;
+            } | {
+                provider: "vercel-kv";
+                keyPrefix: string;
+                defaultTtlMs: number;
+                url?: string | undefined;
+                token?: string | undefined;
+            } | undefined;
+        } | undefined;
+        providerCaching?: boolean | undefined;
+        eventStore?: {
+            enabled: boolean;
+            provider: "memory" | "redis";
+            maxEvents: number;
+            ttlMs: number;
+            redis?: {
+                provider: "redis";
+                host: string;
+                port: number;
+                db: number;
+                tls: boolean;
+                keyPrefix: string;
+                defaultTtlMs: number;
+                password?: string | undefined;
+            } | {
+                provider: "redis";
+                host: string;
+                port: number;
+                db: number;
+                tls: boolean;
+                keyPrefix: string;
+                defaultTtlMs: number;
+                password?: string | undefined;
+            } | {
+                provider: "vercel-kv";
+                keyPrefix: string;
+                defaultTtlMs: number;
+                url?: string | undefined;
+                token?: string | undefined;
+            } | undefined;
+        } | undefined;
+    };
+    splitByApp: false;
+    http?: {
+        port: number;
+        entryPath: string;
         hostFactory?: any;
         socketPath?: string | undefined;
         cors?: false | {
@@ -1050,6 +1391,9 @@ export declare function createMcpGlobalProviders(metadata: FrontMcpConfigType):
             secret: string;
         } | undefined;
     } | undefined;
+    ui?: {
+        cdnOverrides?: Record<string, string> | undefined;
+    } | undefined;
     jobs?: {
         enabled: boolean;
         store?: {
@@ -1081,6 +1425,65 @@ export declare function createMcpGlobalProviders(metadata: FrontMcpConfigType):
             keyPrefix?: string | undefined;
         } | undefined;
     } | undefined;
+    loader?: {
+        url?: string | undefined;
+        registryUrl?: string | undefined;
+        token?: string | undefined;
+        tokenEnvVar?: string | undefined;
+    } | undefined;
+    throttle?: {
+        enabled: boolean;
+        keyPrefix: string;
+        storage?: {
+            [x: string]: unknown;
+        } | undefined;
+        global?: {
+            maxRequests: number;
+            windowMs: number;
+            partitionBy: "session" | "global" | ((ctx: {
+                sessionId: string;
+                clientIp?: string;
+                userId?: string;
+            }) => string) | "ip" | "userId";
+        } | undefined;
+        globalConcurrency?: {
+            maxConcurrent: number;
+            queueTimeoutMs: number;
+            partitionBy: "session" | "global" | "ip" | "userId" | ((ctx: {
+                sessionId: string;
+                clientIp?: string;
+                userId?: string;
+            }) => string);
+        } | undefined;
+        defaultRateLimit?: {
+            maxRequests: number;
+            windowMs: number;
+            partitionBy: "session" | "global" | "ip" | "userId" | ((ctx: {
+                sessionId: string;
+                clientIp?: string;
+                userId?: string;
+            }) => string);
+        } | undefined;
+        defaultConcurrency?: {
+            maxConcurrent: number;
+            queueTimeoutMs: number;
+            partitionBy: "session" | "global" | "ip" | "userId" | ((ctx: {
+                sessionId: string;
+                clientIp?: string;
+                userId?: string;
+            }) => string);
+        } | undefined;
+        defaultTimeout?: {
+            executeMs: number;
+        } | undefined;
+        ipFilter?: {
+            defaultAction: "deny" | "allow";
+            trustProxy: boolean;
+            trustedProxyDepth: number;
+            allowList?: string[] | undefined;
+            denyList?: string[] | undefined;
+        } | undefined;
+    } | undefined;
     auth?: {
         mode: "public";
         sessionTtl: number;
@@ -1096,9 +1499,21 @@ export declare function createMcpGlobalProviders(metadata: FrontMcpConfigType):
         } | undefined;
         signKey?: Uint8Array<ArrayBuffer> | import("libs/auth/dist/common/jwt.types").JWK | undefined;
     } | {
+        requiredScopes: string[];
+        allowAnonymous: boolean;
+        anonymousScopes: string[];
+        provider: string;
         mode: "transparent";
-        remote: {
-            provider: string;
+        expectedAudience?: string | string[] | undefined;
+        publicAccess?: {
+            tools: string[] | "all";
+            prompts: string[] | "all";
+            rateLimit: number;
+        } | undefined;
+        clientId?: string | undefined;
+        clientSecret?: string | undefined;
+        scopes?: string[] | undefined;
+        providerConfig?: {
             dcrEnabled: boolean;
             name?: string | undefined;
             id?: string | undefined;
@@ -1106,29 +1521,14 @@ export declare function createMcpGlobalProviders(metadata: FrontMcpConfigType):
                 keys: import("libs/auth/dist/common/jwt.types").JWK[];
             } | undefined;
             jwksUri?: string | undefined;
-            clientId?: string | undefined;
-            clientSecret?: string | undefined;
-            scopes?: string[] | undefined;
             authEndpoint?: string | undefined;
             tokenEndpoint?: string | undefined;
             registrationEndpoint?: string | undefined;
             userInfoEndpoint?: string | undefined;
-        };
-        requiredScopes: string[];
-        allowAnonymous: boolean;
-        anonymousScopes: string[];
-        expectedAudience?: string | string[] | undefined;
-        publicAccess?: {
-            tools: string[] | "all";
-            prompts: string[] | "all";
-            rateLimit: number;
         } | undefined;
     } | {
-        tokenStorage: {
-            type: "memory";
-        } | {
-            type: "redis";
-            config: {
+        tokenStorage: "memory" | {
+            redis: {
                 host: string;
                 port: number;
                 db: number;
@@ -1140,8 +1540,7 @@ export declare function createMcpGlobalProviders(metadata: FrontMcpConfigType):
         };
         allowDefaultPublic: boolean;
         anonymousScopes: string[];
-        mode: "orchestrated";
-        type: "local";
+        mode: "local";
         local?: {
             signKey?: Uint8Array<ArrayBuffer> | import("libs/auth/dist/common/jwt.types").JWK | undefined;
             jwks?: {
@@ -1211,11 +1610,8 @@ export declare function createMcpGlobalProviders(metadata: FrontMcpConfigType):
             } | undefined;
         } | undefined;
     } | {
-        tokenStorage: {
-            type: "memory";
-        } | {
-            type: "redis";
-            config: {
+        tokenStorage: "memory" | {
+            redis: {
                 host: string;
                 port: number;
                 db: number;
@@ -1227,25 +1623,8 @@ export declare function createMcpGlobalProviders(metadata: FrontMcpConfigType):
         };
         allowDefaultPublic: boolean;
         anonymousScopes: string[];
-        mode: "orchestrated";
-        type: "remote";
-        remote: {
-            provider: string;
-            dcrEnabled: boolean;
-            name?: string | undefined;
-            id?: string | undefined;
-            jwks?: {
-                keys: import("libs/auth/dist/common/jwt.types").JWK[];
-            } | undefined;
-            jwksUri?: string | undefined;
-            clientId?: string | undefined;
-            clientSecret?: string | undefined;
-            scopes?: string[] | undefined;
-            authEndpoint?: string | undefined;
-            tokenEndpoint?: string | undefined;
-            registrationEndpoint?: string | undefined;
-            userInfoEndpoint?: string | undefined;
-        };
+        provider: string;
+        mode: "remote";
         local?: {
             signKey?: Uint8Array<ArrayBuffer> | import("libs/auth/dist/common/jwt.types").JWK | undefined;
             jwks?: {
@@ -1314,6 +1693,22 @@ export declare function createMcpGlobalProviders(metadata: FrontMcpConfigType):
                 maxRedirects: number;
             } | undefined;
         } | undefined;
+        clientId?: string | undefined;
+        clientSecret?: string | undefined;
+        scopes?: string[] | undefined;
+        providerConfig?: {
+            dcrEnabled: boolean;
+            name?: string | undefined;
+            id?: string | undefined;
+            jwks?: {
+                keys: import("libs/auth/dist/common/jwt.types").JWK[];
+            } | undefined;
+            jwksUri?: string | undefined;
+            authEndpoint?: string | undefined;
+            tokenEndpoint?: string | undefined;
+            registrationEndpoint?: string | undefined;
+            userInfoEndpoint?: string | undefined;
+        } | undefined;
     } | undefined;
 } | {
     info: {
@@ -1329,7 +1724,7 @@ export declare function createMcpGlobalProviders(metadata: FrontMcpConfigType):
         }[] | undefined;
     };
     providers: import("@frontmcp/di").Type<unknown>[];
-    tools: import("@frontmcp/di").Type<unknown>[];
+    tools: (string | import("@frontmcp/di").Type<unknown>)[];
     resources: import("@frontmcp/di").Type<unknown>[];
     skills: import("@frontmcp/di").Type<unknown>[];
     plugins: import("@frontmcp/di").Type<unknown>[];
@@ -1566,6 +1961,9 @@ export declare function createMcpGlobalProviders(metadata: FrontMcpConfigType):
             secret: string;
         } | undefined;
     } | undefined;
+    ui?: {
+        cdnOverrides?: Record<string, string> | undefined;
+    } | undefined;
     jobs?: {
         enabled: boolean;
         store?: {
@@ -1597,6 +1995,290 @@ export declare function createMcpGlobalProviders(metadata: FrontMcpConfigType):
             keyPrefix?: string | undefined;
         } | undefined;
     } | undefined;
-    auth?: undefined;
-}>]>)[];
+    loader?: {
+        url?: string | undefined;
+        registryUrl?: string | undefined;
+        token?: string | undefined;
+        tokenEnvVar?: string | undefined;
+    } | undefined;
+    throttle?: {
+        enabled: boolean;
+        keyPrefix: string;
+        storage?: {
+            [x: string]: unknown;
+        } | undefined;
+        global?: {
+            maxRequests: number;
+            windowMs: number;
+            partitionBy: "session" | "global" | ((ctx: {
+                sessionId: string;
+                clientIp?: string;
+                userId?: string;
+            }) => string) | "ip" | "userId";
+        } | undefined;
+        globalConcurrency?: {
+            maxConcurrent: number;
+            queueTimeoutMs: number;
+            partitionBy: "session" | "global" | "ip" | "userId" | ((ctx: {
+                sessionId: string;
+                clientIp?: string;
+                userId?: string;
+            }) => string);
+        } | undefined;
+        defaultRateLimit?: {
+            maxRequests: number;
+            windowMs: number;
+            partitionBy: "session" | "global" | "ip" | "userId" | ((ctx: {
+                sessionId: string;
+                clientIp?: string;
+                userId?: string;
+            }) => string);
+        } | undefined;
+        defaultConcurrency?: {
+            maxConcurrent: number;
+            queueTimeoutMs: number;
+            partitionBy: "session" | "global" | "ip" | "userId" | ((ctx: {
+                sessionId: string;
+                clientIp?: string;
+                userId?: string;
+            }) => string);
+        } | undefined;
+        defaultTimeout?: {
+            executeMs: number;
+        } | undefined;
+        ipFilter?: {
+            defaultAction: "deny" | "allow";
+            trustProxy: boolean;
+            trustedProxyDepth: number;
+            allowList?: string[] | undefined;
+            denyList?: string[] | undefined;
+        } | undefined;
+    } | undefined;
+    auth?: {
+        mode: "public";
+        sessionTtl: number;
+        anonymousScopes: string[];
+        issuer?: string | undefined;
+        publicAccess?: {
+            tools: string[] | "all";
+            prompts: string[] | "all";
+            rateLimit: number;
+        } | undefined;
+        jwks?: {
+            keys: import("libs/auth/dist/common/jwt.types").JWK[];
+        } | undefined;
+        signKey?: Uint8Array<ArrayBuffer> | import("libs/auth/dist/common/jwt.types").JWK | undefined;
+    } | {
+        requiredScopes: string[];
+        allowAnonymous: boolean;
+        anonymousScopes: string[];
+        provider: string;
+        mode: "transparent";
+        expectedAudience?: string | string[] | undefined;
+        publicAccess?: {
+            tools: string[] | "all";
+            prompts: string[] | "all";
+            rateLimit: number;
+        } | undefined;
+        clientId?: string | undefined;
+        clientSecret?: string | undefined;
+        scopes?: string[] | undefined;
+        providerConfig?: {
+            dcrEnabled: boolean;
+            name?: string | undefined;
+            id?: string | undefined;
+            jwks?: {
+                keys: import("libs/auth/dist/common/jwt.types").JWK[];
+            } | undefined;
+            jwksUri?: string | undefined;
+            authEndpoint?: string | undefined;
+            tokenEndpoint?: string | undefined;
+            registrationEndpoint?: string | undefined;
+            userInfoEndpoint?: string | undefined;
+        } | undefined;
+    } | {
+        tokenStorage: "memory" | {
+            redis: {
+                host: string;
+                port: number;
+                db: number;
+                tls: boolean;
+                keyPrefix: string;
+                defaultTtlMs: number;
+                password?: string | undefined;
+            };
+        };
+        allowDefaultPublic: boolean;
+        anonymousScopes: string[];
+        mode: "local";
+        local?: {
+            signKey?: Uint8Array<ArrayBuffer> | import("libs/auth/dist/common/jwt.types").JWK | undefined;
+            jwks?: {
+                keys: import("libs/auth/dist/common/jwt.types").JWK[];
+            } | undefined;
+            issuer?: string | undefined;
+        } | undefined;
+        publicAccess?: {
+            tools: string[] | "all";
+            prompts: string[] | "all";
+            rateLimit: number;
+        } | undefined;
+        consent?: {
+            enabled: boolean;
+            groupByApp: boolean;
+            showDescriptions: boolean;
+            allowSelectAll: boolean;
+            requireSelection: boolean;
+            rememberConsent: boolean;
+            customMessage?: string | undefined;
+            excludedTools?: string[] | undefined;
+            defaultSelectedTools?: string[] | undefined;
+        } | undefined;
+        federatedAuth?: {
+            stateValidation: "format" | "strict";
+        } | undefined;
+        refresh?: {
+            enabled: boolean;
+            skewSeconds: number;
+        } | undefined;
+        expectedAudience?: string | string[] | undefined;
+        incrementalAuth?: {
+            enabled: boolean;
+            skippedAppBehavior: "anonymous" | "require-auth";
+            allowSkip: boolean;
+            showAllAppsAtOnce: boolean;
+        } | undefined;
+        cimd?: {
+            enabled: boolean;
+            cache?: {
+                type: "memory" | "redis";
+                defaultTtlMs: number;
+                maxTtlMs: number;
+                minTtlMs: number;
+                redis?: {
+                    keyPrefix: string;
+                    url?: string | undefined;
+                    host?: string | undefined;
+                    port?: number | undefined;
+                    password?: string | undefined;
+                    db?: number | undefined;
+                    tls?: boolean | undefined;
+                } | undefined;
+            } | undefined;
+            security?: {
+                blockPrivateIPs: boolean;
+                warnOnLocalhostRedirects: boolean;
+                allowInsecureForTesting: boolean;
+                allowedDomains?: string[] | undefined;
+                blockedDomains?: string[] | undefined;
+            } | undefined;
+            network?: {
+                timeoutMs: number;
+                maxResponseSizeBytes: number;
+                redirectPolicy: "deny" | "same-origin" | "allow";
+                maxRedirects: number;
+            } | undefined;
+        } | undefined;
+    } | {
+        tokenStorage: "memory" | {
+            redis: {
+                host: string;
+                port: number;
+                db: number;
+                tls: boolean;
+                keyPrefix: string;
+                defaultTtlMs: number;
+                password?: string | undefined;
+            };
+        };
+        allowDefaultPublic: boolean;
+        anonymousScopes: string[];
+        provider: string;
+        mode: "remote";
+        local?: {
+            signKey?: Uint8Array<ArrayBuffer> | import("libs/auth/dist/common/jwt.types").JWK | undefined;
+            jwks?: {
+                keys: import("libs/auth/dist/common/jwt.types").JWK[];
+            } | undefined;
+            issuer?: string | undefined;
+        } | undefined;
+        publicAccess?: {
+            tools: string[] | "all";
+            prompts: string[] | "all";
+            rateLimit: number;
+        } | undefined;
+        consent?: {
+            enabled: boolean;
+            groupByApp: boolean;
+            showDescriptions: boolean;
+            allowSelectAll: boolean;
+            requireSelection: boolean;
+            rememberConsent: boolean;
+            customMessage?: string | undefined;
+            excludedTools?: string[] | undefined;
+            defaultSelectedTools?: string[] | undefined;
+        } | undefined;
+        federatedAuth?: {
+            stateValidation: "format" | "strict";
+        } | undefined;
+        refresh?: {
+            enabled: boolean;
+            skewSeconds: number;
+        } | undefined;
+        expectedAudience?: string | string[] | undefined;
+        incrementalAuth?: {
+            enabled: boolean;
+            skippedAppBehavior: "anonymous" | "require-auth";
+            allowSkip: boolean;
+            showAllAppsAtOnce: boolean;
+        } | undefined;
+        cimd?: {
+            enabled: boolean;
+            cache?: {
+                type: "memory" | "redis";
+                defaultTtlMs: number;
+                maxTtlMs: number;
+                minTtlMs: number;
+                redis?: {
+                    keyPrefix: string;
+                    url?: string | undefined;
+                    host?: string | undefined;
+                    port?: number | undefined;
+                    password?: string | undefined;
+                    db?: number | undefined;
+                    tls?: boolean | undefined;
+                } | undefined;
+            } | undefined;
+            security?: {
+                blockPrivateIPs: boolean;
+                warnOnLocalhostRedirects: boolean;
+                allowInsecureForTesting: boolean;
+                allowedDomains?: string[] | undefined;
+                blockedDomains?: string[] | undefined;
+            } | undefined;
+            network?: {
+                timeoutMs: number;
+                maxResponseSizeBytes: number;
+                redirectPolicy: "deny" | "same-origin" | "allow";
+                maxRedirects: number;
+            } | undefined;
+        } | undefined;
+        clientId?: string | undefined;
+        clientSecret?: string | undefined;
+        scopes?: string[] | undefined;
+        providerConfig?: {
+            dcrEnabled: boolean;
+            name?: string | undefined;
+            id?: string | undefined;
+            jwks?: {
+                keys: import("libs/auth/dist/common/jwt.types").JWK[];
+            } | undefined;
+            jwksUri?: string | undefined;
+            authEndpoint?: string | undefined;
+            tokenEndpoint?: string | undefined;
+            registrationEndpoint?: string | undefined;
+            userInfoEndpoint?: string | undefined;
+        } | undefined;
+    } | undefined;
+}>]> | ProviderValueType<FrontMcpServer>)[];
 //# sourceMappingURL=front-mcp.providers.d.ts.map