@mongodb-js/mcp-types 3.0.0-prerelease.4 → 3.0.0-prerelease.6

package/dist/connection.d.ts

@@ -1,28 +1,19 @@
 /**
- * Atlas cluster connection info containing details about the connected Atlas cluster.
- * When provided, indicates the connection is to an Atlas cluster.
+ * The Atlas cluster a connection entry addresses. Supplying it when creating the
+ * entry marks the connection as an Atlas one: it drives cluster attribution on
+ * tool telemetry, the `atlas` host type, and lets `pause-resume-cluster` find
+ * the connections to the cluster it just paused. A host that establishes the
+ * connection with its own credentials (X.509, a pre-provisioned user, a proxy)
+ * still knows which cluster it connected to and should supply this.
  *
- * The cluster's projectId, name and id are required. A host that establishes the
- * connection without minting a temporary database user — via its own credential
- * issuance, X.509, a pre-provisioned user, a proxy — still knows which cluster it
- * connected to and needs to be able to specify it: this field is what marks a
- * connection as pointing at Atlas, and leaving it unset prevents cluster
- * attribution on tool telemetry, the `atlas` host type, and the ability of
- * `pause-resume-cluster` to find connections to the cluster it just paused.
- * Hosts that only know the cluster name should resolve the id through the Atlas
- * API before connecting.
+ * `clusterId` should be resolved through the Atlas API before connecting; it is
+ * optional only because a registry can know which cluster a handle addresses
+ * before the handle has dialed and resolved the id.
  */
 export type AtlasClusterConnectionInfo = {
-    /** Which Atlas cluster this connection points at. */
     projectId: string;
     clusterName: string;
-    clusterId: string;
-    /**
-     * The temporary database user backing the connection. Set only by
-     * `connect-cluster`, which also schedules its deletion; absent when the
-     * host supplied its own credentials.
-     */
-    username?: string;
+    clusterId?: string;
     /** The cluster's tier, set when the host resolved it. */
     instanceType?: "FREE" | "FLEX" | "DEDICATED";
 };
@@ -41,6 +32,5 @@ export type ConnectionStringInfo = {
 export type SupportedConnectionState = {
     tag: string;
     connectionStringInfo?: ConnectionStringInfo;
-    connectedAtlasCluster?: AtlasClusterConnectionInfo;
 };
 //# sourceMappingURL=connection.d.ts.map

package/dist/connection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connection.d.ts","sourceRoot":"","sources":["../src/connection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,0BAA0B,GAAG;IACrC,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAElB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,WAAW,CAAC;CAChD,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG;IAC/B,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,UAAU,GAAG,gBAAgB,GAAG,kBAAkB,GAAG,OAAO,GAAG,SAAS,CAAC;IACtG,QAAQ,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,aAAa,GAAG,OAAO,CAAC;CACrE,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,qBAAqB,CAAC,EAAE,0BAA0B,CAAC;CACtD,CAAC"}
+{"version":3,"file":"connection.d.ts","sourceRoot":"","sources":["../src/connection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,0BAA0B,GAAG;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,WAAW,CAAC;CAChD,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG;IAC/B,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,UAAU,GAAG,gBAAgB,GAAG,kBAAkB,GAAG,OAAO,GAAG,SAAS,CAAC;IACtG,QAAQ,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,aAAa,GAAG,OAAO,CAAC;CACrE,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;CAC/C,CAAC"}

package/dist/keychain.d.ts

@@ -1,4 +1,3 @@
-import type { Secret } from "mongodb-redact";
 export type { Secret } from "mongodb-redact";
 /**
  * The redaction half of a keychain, for consumers that need to scrub secrets out of a value but
@@ -15,9 +14,17 @@ export interface IRedactor {
      * redacted. Never mutates `value`, and terminates on self-referencing input.
      */
     redact<T>(value: T): T;
+    /**
+     * Returns the message of an `error` (or the string form of a non-error) with
+     * this redactor's secrets removed, for safe logging or display.
+     */
+    redactErrorMessage(error: unknown): string;
 }
-export interface IKeychain extends IRedactor {
-    register(value: Secret["value"], kind: Secret["kind"]): void;
-    clearAllSecrets(): void;
-}
+/**
+ * A keychain, for consumers that hold one and need to redact secrets (loggers,
+ * tools, the server). It is immutable: its secrets are fixed at construction and
+ * cannot be registered or cleared afterwards, so it never grows over a process
+ * lifetime. The only action is {@link IRedactor.redact}.
+ */
+export type IKeychain = IRedactor;
 //# sourceMappingURL=keychain.d.ts.map

package/dist/keychain.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"keychain.d.ts","sourceRoot":"","sources":["../src/keychain.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAE7C,YAAY,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAE7C;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACtB;;;;;;;OAOG;IACH,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,SAAU,SAAQ,SAAS;IACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IAC7D,eAAe,IAAI,IAAI,CAAC;CAC3B"}
+{"version":3,"file":"keychain.d.ts","sourceRoot":"","sources":["../src/keychain.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAE7C;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACtB;;;;;;;OAOG;IACH,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC;IACvB;;;OAGG;IACH,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC;CAC9C;AAED;;;;;GAKG;AACH,MAAM,MAAM,SAAS,GAAG,SAAS,CAAC"}

package/dist/transport.d.ts

@@ -13,32 +13,42 @@ export type RequestAuthInfo = {
     scopes: string[];
     /** When the token expires (in seconds since epoch). */
     expiresAt?: number;
+    /**
+     * Additional verified claims about the token, mirroring the SDK's
+     * `AuthInfo.extra`. Per-user scoping reads the OIDC `sub` claim here:
+     * `clientId` identifies the OAuth client application, not the end user, so
+     * deployments where several users authenticate through one shared client
+     * need a per-user principal claim (carried here) for per-user isolation.
+     */
+    extra?: Record<string, unknown>;
 };
 /**
- * The explicit authentication state of a request. Every HTTP request carries
- * one or the other — there is no "unknown" — so per-request servers always
- * know whether they are serving an authenticated client, and scope shared
- * state (e.g. connections) by the verified `clientId` when authenticated.
- * Identity is injected by the host (e.g. `req.auth` via the node adapter's
- * pass-through, or directly on the request context); the server never
- * authenticates on its own.
+ * Decides which connection scope a request gets — i.e. which connections it
+ * can see and where connections it creates are stored. Returns the scope key,
+ * or `undefined` for an ephemeral scope (no cross-request state, isolated
+ * from every other request).
+ *
+ * This is the knob that controls connection isolation: it must be keyed on
+ * whatever actually distinguishes the calling principals (per-user principal,
+ * OAuth client id, token, tenant, …) for correct, per-caller isolation with
+ * no shared state. Keyed on `clientId` alone, for example, it groups every
+ * user of one client registration together — fine for service accounts,
+ * wrong for a multi-user OIDC deployment. Returning `undefined` declines
+ * cross-request state for a request entirely.
  */
-export type RequestAuthState = {
-    mode: "unauthenticated";
-} | {
-    mode: "authenticated";
-    state: RequestAuthInfo;
-};
+export type ConnectionScopePolicy = (request: TransportRequestContext) => string | undefined;
 export type McpProtocol = "legacy" | "2026-07-28";
 export type TransportRequestContext = {
     headers?: Record<string, string | string[] | undefined>;
     query?: Record<string, string | string[] | undefined>;
     /**
-     * The explicit auth state of this request. When authenticated, shared state
-     * (connections) is scoped by `state.clientId`; unauthenticated requests are
-     * isolated from authenticated clients.
+     * The verified identity of this request, if the host injected one (via
+     * `req.auth`, which the node adapter forwards, or directly). Absent means
+     * the host did not verify an identity for this request. Connection
+     * scoping and per-request authorization decisions key on this rather than
+     * self-asserted headers.
      */
-    authInfo?: RequestAuthState;
+    authInfo?: RequestAuthInfo;
     protocol?: McpProtocol;
 };
 export interface ITransportRunner {

package/dist/transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG;IAC1B,wBAAwB;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,yCAAyC;IACzC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,EAAE,iBAAiB,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,eAAe,CAAA;CAAE,CAAC;AAE/G,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,YAAY,CAAC;AAElD,MAAM,MAAM,uBAAuB,GAAG;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IACtD;;;;OAIG;IACH,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,QAAQ,CAAC,EAAE,WAAW,CAAC;CAC1B,CAAC;AAEF,MAAM,WAAW,gBAAgB;IAC7B,KAAK,CAAC,OAAO,EAAE;QAAE,aAAa,CAAC,EAAE,OAAO,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC3B,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACpD"}
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG;IAC1B,wBAAwB;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,yCAAyC;IACzC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,EAAE,uBAAuB,KAAK,MAAM,GAAG,SAAS,CAAC;AAE7F,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,YAAY,CAAC;AAElD,MAAM,MAAM,uBAAuB,GAAG;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IACtD;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,QAAQ,CAAC,EAAE,WAAW,CAAC;CAC1B,CAAC;AAEF,MAAM,WAAW,gBAAgB;IAC7B,KAAK,CAAC,OAAO,EAAE;QAAE,aAAa,CAAC,EAAE,OAAO,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC3B,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACpD"}

package/dist/transports.d.ts

@@ -13,18 +13,12 @@ export type HttpServerOptions = {
     /** Response type: 'sse' for Server-Sent Events, 'json' for JSON responses */
     responseType?: "sse" | "json";
     /**
-     * The HTTP entry's auth mode (required — there is no implicit default so a
-     * deployment's posture is always explicit):
-     *
-     * - `"authenticated"`: every request must carry a verified identity (hosts
-     *   inject it via `req.auth`, which the node adapter forwards as the
-     *   handler's authInfo; the server never authenticates on its own).
-     *   Unauthenticated requests are rejected with 401 and the request
-     *   context's authInfo is always `{ mode: "authenticated", state }`.
-     * - `"unauthenticated"`: authInfo carries whatever the host provides,
-     *   defaulting to `{ mode: "unauthenticated" }`.
+     * When true, permits binding to a non-loopback host (e.g. `0.0.0.0`, `::`,
+     * a LAN IP, or an empty host meaning "all interfaces"). Defaults to a strict
+     * loopback-only policy that throws when the host is not loopback. Set this
+     * explicitly only when the server is intentionally exposed to the network.
      */
-    authMode: "authenticated" | "unauthenticated";
+    dangerousHostBinding?: boolean;
 };
 /**
  * Options for transport runners.

package/dist/transports.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transports.d.ts","sourceRoot":"","sources":["../src/transports.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC5B,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0BAA0B;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,6EAA6E;IAC7E,YAAY,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAC9B;;;;;;;;;;;OAWG;IACH,QAAQ,EAAE,eAAe,GAAG,iBAAiB,CAAC;CACjD,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACjC,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAC;CACnB,CAAC"}
+{"version":3,"file":"transports.d.ts","sourceRoot":"","sources":["../src/transports.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC5B,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0BAA0B;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,6EAA6E;IAC7E,YAAY,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAC9B;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAClC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACjC,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAC;CACnB,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@mongodb-js/mcp-types",
   "description": "Shared TypeScript types and interfaces for MongoDB MCP server packages",
-  "version": "3.0.0-prerelease.4",
+  "version": "3.0.0-prerelease.6",
   "type": "module",
   "license": "Apache-2.0",
   "author": "MongoDB <info@mongodb.com>",