@mcp-ts/sdk 2.4.5 → 2.5.0

package/dist/{multi-session-client-ChQrBZhF.d.mts → multi-session-client-CSPSHHla.d.ts}

@@ -1,4 +1,4 @@
-import { m as Event, M as McpConnectionEvent, t as McpObservabilityEvent, s as McpConnectionState, A as ToolClientProvider } from './types-Bf-7GOLW.mjs';
+import { m as Event, M as McpConnectionEvent, t as McpObservabilityEvent, s as McpConnectionState, A as ToolClientProvider, T as ToolClient } from './types-DK_NGWd4.js';
 import { ListToolsResult, CallToolResult, ListPromptsResult, GetPromptResult, ListResourcesResult, ReadResourceResult } from '@modelcontextprotocol/sdk/types.js';
 import { OAuthClientProvider } from '@modelcontextprotocol/sdk/client/auth.js';
 import { OAuthClientMetadata, OAuthClientInformationMixed, OAuthClientInformationFull, OAuthTokens } from '@modelcontextprotocol/sdk/shared/auth.js';
@@ -222,6 +222,11 @@ declare class MCPClient {
      * @param authCode - Authorization code received from OAuth callback
      */
     finishAuth(authCode: string, state?: string): Promise<void>;
+    /**
+     * Lists all available tools from the connected MCP server without emitting discovery events.
+     * Gateways use this to apply policy before publishing tools to agents or UI state.
+     */
+    fetchTools(): Promise<ListToolsResult>;
     /**
      * Lists all available tools from the connected MCP server
      * @returns List of tools with their schemas and descriptions
@@ -345,6 +350,12 @@ interface OAuthState {
     createdAt: number;
 }
 type SessionStatus = 'pending' | 'active';
+type ToolPolicyMode = 'all' | 'allowlist' | 'denylist';
+interface ToolPolicy {
+    mode: ToolPolicyMode;
+    toolIds: string[];
+    updatedAt: number;
+}
 interface Session {
     sessionId: string;
     serverId?: string;
@@ -368,6 +379,7 @@ interface Session {
      * - active: restorable session after successful connection/auth completion
      */
     status?: SessionStatus;
+    toolPolicy?: ToolPolicy;
 }
 interface SessionCredentials {
     sessionId: string;
@@ -543,7 +555,7 @@ declare class MultiSessionClient implements ToolClientProvider {
      * Use this to enumerate available tools across all connected servers,
      * or to route a tool call to the right client by `serverId`.
      */
-    getClients(): MCPClient[];
+    getClients(): ToolClient[];
     /**
      * Removes and disconnects a single session by ID.
      *

package/dist/{multi-session-client-QOOPdEVp.d.ts → multi-session-client-DMZGVABI.d.mts}

@@ -1,4 +1,4 @@
-import { m as Event, M as McpConnectionEvent, t as McpObservabilityEvent, s as McpConnectionState, A as ToolClientProvider } from './types-Bf-7GOLW.js';
+import { m as Event, M as McpConnectionEvent, t as McpObservabilityEvent, s as McpConnectionState, A as ToolClientProvider, T as ToolClient } from './types-DK_NGWd4.mjs';
 import { ListToolsResult, CallToolResult, ListPromptsResult, GetPromptResult, ListResourcesResult, ReadResourceResult } from '@modelcontextprotocol/sdk/types.js';
 import { OAuthClientProvider } from '@modelcontextprotocol/sdk/client/auth.js';
 import { OAuthClientMetadata, OAuthClientInformationMixed, OAuthClientInformationFull, OAuthTokens } from '@modelcontextprotocol/sdk/shared/auth.js';
@@ -222,6 +222,11 @@ declare class MCPClient {
      * @param authCode - Authorization code received from OAuth callback
      */
     finishAuth(authCode: string, state?: string): Promise<void>;
+    /**
+     * Lists all available tools from the connected MCP server without emitting discovery events.
+     * Gateways use this to apply policy before publishing tools to agents or UI state.
+     */
+    fetchTools(): Promise<ListToolsResult>;
     /**
      * Lists all available tools from the connected MCP server
      * @returns List of tools with their schemas and descriptions
@@ -345,6 +350,12 @@ interface OAuthState {
     createdAt: number;
 }
 type SessionStatus = 'pending' | 'active';
+type ToolPolicyMode = 'all' | 'allowlist' | 'denylist';
+interface ToolPolicy {
+    mode: ToolPolicyMode;
+    toolIds: string[];
+    updatedAt: number;
+}
 interface Session {
     sessionId: string;
     serverId?: string;
@@ -368,6 +379,7 @@ interface Session {
      * - active: restorable session after successful connection/auth completion
      */
     status?: SessionStatus;
+    toolPolicy?: ToolPolicy;
 }
 interface SessionCredentials {
     sessionId: string;
@@ -543,7 +555,7 @@ declare class MultiSessionClient implements ToolClientProvider {
      * Use this to enumerate available tools across all connected servers,
      * or to route a tool call to the right client by `serverId`.
      */
-    getClients(): MCPClient[];
+    getClients(): ToolClient[];
     /**
      * Removes and disconnects a single session by ID.
      *

package/dist/server/index.d.mts

@@ -1,8 +1,8 @@
-import { c as SessionMutationListener, e as SessionStore } from '../multi-session-client-ChQrBZhF.mjs';
-export { M as MCPClient, a as MultiSessionClient, S as Session, b as SessionMutationEvent, d as SessionMutationType, f as StorageOAuthClientProvider } from '../multi-session-client-ChQrBZhF.mjs';
+import { c as SessionMutationListener, e as SessionStore } from '../multi-session-client-DMZGVABI.mjs';
+export { M as MCPClient, a as MultiSessionClient, S as Session, b as SessionMutationEvent, d as SessionMutationType, f as StorageOAuthClientProvider } from '../multi-session-client-DMZGVABI.mjs';
 export { U as UnauthorizedError, s as sanitizeServerLabel } from '../utils-DELRKQPU.mjs';
-import { M as McpConnectionEvent, t as McpObservabilityEvent, x as McpRpcResponse, w as McpRpcRequest } from '../types-Bf-7GOLW.mjs';
-export { a as CallToolRequest, b as CallToolResponse, f as ConnectRequest, g as ConnectResponse, k as Disposable, E as Emitter, m as Event, q as ListToolsResponse, s as McpConnectionState, T as ToolClient, A as ToolClientProvider, B as ToolInfo } from '../types-Bf-7GOLW.mjs';
+import { M as McpConnectionEvent, t as McpObservabilityEvent, x as McpRpcResponse, w as McpRpcRequest } from '../types-DK_NGWd4.mjs';
+export { a as CallToolRequest, b as CallToolResponse, f as ConnectRequest, g as ConnectResponse, k as Disposable, E as Emitter, m as Event, q as ListToolsResponse, s as McpConnectionState, T as ToolClient, A as ToolClientProvider, B as ToolInfo } from '../types-DK_NGWd4.mjs';
 export { OAuthClientInformation, OAuthClientInformationFull, OAuthClientMetadata, OAuthTokens } from '@modelcontextprotocol/sdk/shared/auth.js';
 export { CallToolResult, ListToolsResult, Tool } from '@modelcontextprotocol/sdk/types.js';
 import '@modelcontextprotocol/sdk/client/auth.js';
@@ -87,10 +87,19 @@ declare class SSEConnectionManager {
      * Get an existing client or create and connect a new one for the session.
      */
     private getOrCreateClient;
+    private listPolicyFilteredTools;
     /**
      * List tools from a session
      */
     private listTools;
+    /**
+     * Get all raw tools with effective access state for management UI.
+     */
+    private getToolPolicy;
+    /**
+     * Update per-session tool access policy.
+     */
+    private setToolPolicy;
     /**
      * Call a tool on the MCP server
      */

package/dist/server/index.d.ts

@@ -1,8 +1,8 @@
-import { c as SessionMutationListener, e as SessionStore } from '../multi-session-client-QOOPdEVp.js';
-export { M as MCPClient, a as MultiSessionClient, S as Session, b as SessionMutationEvent, d as SessionMutationType, f as StorageOAuthClientProvider } from '../multi-session-client-QOOPdEVp.js';
+import { c as SessionMutationListener, e as SessionStore } from '../multi-session-client-CSPSHHla.js';
+export { M as MCPClient, a as MultiSessionClient, S as Session, b as SessionMutationEvent, d as SessionMutationType, f as StorageOAuthClientProvider } from '../multi-session-client-CSPSHHla.js';
 export { U as UnauthorizedError, s as sanitizeServerLabel } from '../utils-DELRKQPU.js';
-import { M as McpConnectionEvent, t as McpObservabilityEvent, x as McpRpcResponse, w as McpRpcRequest } from '../types-Bf-7GOLW.js';
-export { a as CallToolRequest, b as CallToolResponse, f as ConnectRequest, g as ConnectResponse, k as Disposable, E as Emitter, m as Event, q as ListToolsResponse, s as McpConnectionState, T as ToolClient, A as ToolClientProvider, B as ToolInfo } from '../types-Bf-7GOLW.js';
+import { M as McpConnectionEvent, t as McpObservabilityEvent, x as McpRpcResponse, w as McpRpcRequest } from '../types-DK_NGWd4.js';
+export { a as CallToolRequest, b as CallToolResponse, f as ConnectRequest, g as ConnectResponse, k as Disposable, E as Emitter, m as Event, q as ListToolsResponse, s as McpConnectionState, T as ToolClient, A as ToolClientProvider, B as ToolInfo } from '../types-DK_NGWd4.js';
 export { OAuthClientInformation, OAuthClientInformationFull, OAuthClientMetadata, OAuthTokens } from '@modelcontextprotocol/sdk/shared/auth.js';
 export { CallToolResult, ListToolsResult, Tool } from '@modelcontextprotocol/sdk/types.js';
 import '@modelcontextprotocol/sdk/client/auth.js';
@@ -87,10 +87,19 @@ declare class SSEConnectionManager {
      * Get an existing client or create and connect a new one for the session.
      */
     private getOrCreateClient;
+    private listPolicyFilteredTools;
     /**
      * List tools from a session
      */
     private listTools;
+    /**
+     * Get all raw tools with effective access state for management UI.
+     */
+    private getToolPolicy;
+    /**
+     * Update per-session tool access policy.
+     */
+    private setToolPolicy;
     /**
      * Call a tool on the MCP server
      */