@rad-security/mcp-server 0.0.35 → 0.0.36-5.g3825a61

package/dist/index.js

@@ -45,6 +45,33 @@ function parseToolkitFilters() {
     }
     return result;
 }
+// Per-request toolkit selection via headers, so a single hosted endpoint can
+// serve different agents a scoped subset. Falls back to the env filters when no
+// toolkit header is present.
+//   X-Rad-Toolkits:         comma-separated include list (only these enabled)
+//   X-Rad-Exclude-Toolkits: comma-separated exclude list (all others enabled)
+//   X-Rad-Readonly: true    expose/allow only read-only tools (drops writes)
+function toolkitFiltersForRequest(req) {
+    const header = (name) => {
+        const v = req.headers[name];
+        return Array.isArray(v) ? v[0] : v;
+    };
+    const parseList = (v) => {
+        const items = (v || "")
+            .split(",")
+            .map((s) => s.trim())
+            .filter(Boolean);
+        return items.length ? items : undefined;
+    };
+    const readonly = /^(1|true|yes)$/i.test((header("x-rad-readonly") || "").trim());
+    const include = parseList(header("x-rad-toolkits"));
+    const exclude = parseList(header("x-rad-exclude-toolkits"));
+    // A toolkit header, when present, overrides the env filters.
+    if (include || exclude) {
+        return { include, exclude, readonly };
+    }
+    return { ...parseToolkitFilters(), readonly };
+}
 // Toolkits that are disabled by default and must be explicitly included
 const DISABLED_BY_DEFAULT_TOOLKITS = ["custom_workflows"];
 // Check if a toolkit type should be enabled
@@ -64,8 +91,7 @@ function isToolkitEnabled(toolkitType, filters) {
     // By default, all other toolkits are enabled
     return true;
 }
-async function newServer(client) {
-    const toolkitFilters = parseToolkitFilters();
+async function newServer(client, toolkitFilters) {
     const server = new Server({
         name: "RAD Security MCP Server",
         version: VERSION,
@@ -76,298 +102,297 @@ async function newServer(client) {
             tools: {},
         },
     });
-    server.setRequestHandler(ListToolsRequestSchema, async () => {
-        const allTools = [
-            // Container tools
-            ...(isToolkitEnabled("containers", toolkitFilters)
-                ? [
-                    {
-                        name: "list_containers",
-                        annotations: { title: "List Containers", readOnlyHint: true },
-                        description: "List containers secured by RAD Security with optional filtering by image name, image digest, namespace, cluster_id, or free text search",
-                        inputSchema: zodToJsonSchema(containers.ListContainersSchema),
-                    },
-                    {
-                        name: "get_container_details",
-                        annotations: { title: "Get Container Details", readOnlyHint: true },
-                        description: "Get detailed information about a container secured by RAD Security",
-                        inputSchema: zodToJsonSchema(containers.GetContainerDetailsSchema),
-                    },
-                ]
-                : []),
-            // Cluster tools
-            ...(isToolkitEnabled("clusters", toolkitFilters)
-                ? [
-                    {
-                        name: "list_clusters",
-                        annotations: { title: "List Clusters", readOnlyHint: true },
-                        description: "List Kubernetes clusters managed by RAD Security",
-                        inputSchema: zodToJsonSchema(clusters.ListClustersSchema),
-                    },
-                    {
-                        name: "get_cluster_details",
-                        annotations: { title: "Get Cluster Details", readOnlyHint: true },
-                        description: "Get detailed information about a specific Kubernetes cluster managed by RAD Security",
-                        inputSchema: zodToJsonSchema(clusters.GetClusterDetailsSchema),
-                    },
-                ]
-                : []),
-            // Audit tools
-            ...(isToolkitEnabled("audit", toolkitFilters)
-                ? [
-                    {
-                        name: "who_shelled_into_pod",
-                        annotations: { title: "Who Shelled Into Pod", readOnlyHint: true },
-                        description: "Get k8s audit logs with information about users who shelled into a pod",
-                        inputSchema: zodToJsonSchema(audit.WhoShelledIntoPodSchema),
-                    },
-                ]
-                : []),
-            // Image tools
-            ...(isToolkitEnabled("images", toolkitFilters)
-                ? [
-                    {
-                        name: "list_images",
-                        annotations: { title: "List Images", readOnlyHint: true },
-                        description: "List container images with optional filtering by page, page size, sort, and search query",
-                        inputSchema: zodToJsonSchema(images.ListImagesSchema),
-                    },
-                    {
-                        name: "list_image_vulnerabilities",
-                        annotations: { title: "List Image Vulnerabilities", readOnlyHint: true },
-                        description: "List vulnerabilities in a container image with optional filtering by severity",
-                        inputSchema: zodToJsonSchema(images.ListImageVulnerabilitiesSchema),
-                    },
-                    {
-                        name: "get_top_vulnerable_images",
-                        annotations: { title: "Get Top Vulnerable Images", readOnlyHint: true },
-                        description: "Get the most vulnerable images from your account",
-                        inputSchema: zodToJsonSchema(z.object({})),
-                    },
-                    {
-                        name: "get_image_sbom",
-                        annotations: { title: "Get Image SBOM", readOnlyHint: true },
-                        description: "Get the SBOM of a container image",
-                        inputSchema: zodToJsonSchema(images.GetImageSBOMSchema),
-                    },
-                    {
-                        name: "ignore_cve",
-                        annotations: { title: "Ignore CVE", readOnlyHint: false, destructiveHint: false },
-                        description: "Ignore a CVE for this account so it no longer appears in vulnerability reporting. Use for confirmed false positives, accepted risks, or won't-fix decisions. Do NOT use for remediated CVEs — those drop off automatically on the next scan.",
-                        inputSchema: zodToJsonSchema(cveDispositions.ignoreCveSchema),
-                    },
-                    {
-                        name: "unignore_cve",
-                        annotations: { title: "Unignore CVE", readOnlyHint: false, destructiveHint: true },
-                        description: "Remove an account-wide CVE disposition, restoring the CVE to vulnerability reporting.",
-                        inputSchema: zodToJsonSchema(cveDispositions.unignoreCveSchema),
-                    },
-                    {
-                        name: "list_cve_dispositions",
-                        annotations: { title: "List CVE Dispositions", readOnlyHint: true },
-                        description: "List active CVE dispositions (ignored / false positive) for this account, with reason and author.",
-                        inputSchema: zodToJsonSchema(cveDispositions.listCveDispositionsSchema),
-                    },
-                ]
-                : []),
-            // Kubernetes Object tools
-            ...(isToolkitEnabled("kubeobject", toolkitFilters)
-                ? [
-                    {
-                        name: "get_k8s_resource_details",
-                        annotations: { title: "Get Kubernetes Resource Details", readOnlyHint: true },
-                        description: "Get the latest manifest of a Kubernetes resource",
-                        inputSchema: zodToJsonSchema(kubeobject.GetKubernetesResourceDetailsSchema),
-                    },
-                    {
-                        name: "list_k8s_resources",
-                        annotations: { title: "List Kubernetes Resources", readOnlyHint: true },
-                        description: "List Kubernetes resources with optional filtering by namespace, resource types, and cluster",
-                        inputSchema: zodToJsonSchema(kubeobject.ListKubernetesResourcesSchema),
-                    },
-                ]
-                : []),
-            // Runtime tools
-            ...(isToolkitEnabled("runtime", toolkitFilters)
-                ? [
-                    {
-                        name: "get_containers_process_trees",
-                        annotations: { title: "Get Container Process Trees", readOnlyHint: true },
-                        description: "Get process trees for multiple containers",
-                        inputSchema: zodToJsonSchema(runtime.GetContainersProcessTreesSchema),
-                    },
-                    {
-                        name: "get_containers_baselines",
-                        annotations: { title: "Get Container Baselines", readOnlyHint: true },
-                        description: "Get runtime baselines for multiple containers",
-                        inputSchema: zodToJsonSchema(runtime.GetContainersBaselinesSchema),
-                    },
-                    {
-                        name: "get_container_llm_analysis",
-                        annotations: { title: "Get Container LLM Analysis", readOnlyHint: true },
-                        description: "Get LLM analysis of a container's process tree",
-                        inputSchema: zodToJsonSchema(runtime.GetContainerLLMAnalysisSchema),
-                    },
-                ]
-                : []),
-            // Findings tools
-            ...(isToolkitEnabled("findings", toolkitFilters)
-                ? [
-                    {
-                        name: "list_security_findings",
-                        annotations: { title: "List Security Findings", readOnlyHint: true },
-                        description: "List security findings with optional filtering by types, severities, sources, and status",
-                        inputSchema: zodToJsonSchema(findings.listFindingsSchema),
-                    },
-                    {
-                        name: "update_security_finding_status",
-                        annotations: { title: "Update Security Finding Status", readOnlyHint: false, destructiveHint: false },
-                        description: "Update the status of a security finding",
-                        inputSchema: zodToJsonSchema(findings.updateFindingStatusSchema),
-                    },
-                ]
-                : []),
-            // Inbox tools
-            ...(isToolkitEnabled("inbox", toolkitFilters)
-                ? [
-                    {
-                        name: "mark_inbox_item_as_false_positive",
-                        annotations: { title: "Mark Inbox Item as False Positive", readOnlyHint: false, destructiveHint: false },
-                        description: "Mark an inbox item as a false positive with a reason",
-                        inputSchema: zodToJsonSchema(inbox.MarkInboxItemAsFalsePositiveSchema),
-                    },
-                    {
-                        name: "list_inbox_items",
-                        annotations: { title: "List Inbox Items", readOnlyHint: true },
-                        description: "List inbox items with optional filtering by any field. Multiple filters can be combined eg. 'search:cve-2024-12345 and severity:high'",
-                        inputSchema: zodToJsonSchema(inbox.ListInboxItemsSchema),
-                    },
-                    {
-                        name: "get_inbox_item_details",
-                        annotations: { title: "Get Inbox Item Details", readOnlyHint: true },
-                        description: "Get detailed information about a specific inbox item",
-                        inputSchema: zodToJsonSchema(inbox.GetInboxItemDetailsSchema),
-                    },
-                ]
-                : []),
-            // Workflows tools
-            ...(isToolkitEnabled("workflows", toolkitFilters)
-                ? [
-                    {
-                        name: "list_workflows",
-                        annotations: { title: "List Workflows", readOnlyHint: true },
-                        description: "List all workflows",
-                        inputSchema: zodToJsonSchema(workflows.ListWorkflowsSchema),
-                    },
-                    {
-                        name: "get_workflow",
-                        annotations: { title: "Get Workflow", readOnlyHint: true },
-                        description: "Get detailed information about a specific workflow by ID. It contains the workflow definition, default arguments, and schema how to run the workflow",
-                        inputSchema: zodToJsonSchema(workflows.GetWorkflowSchema),
-                    },
-                    {
-                        name: "list_workflow_runs",
-                        annotations: { title: "List Workflow Runs", readOnlyHint: true },
-                        description: "List workflow runs with optional filtering by workflow ID",
-                        inputSchema: zodToJsonSchema(workflows.ListWorkflowRunsSchema),
-                    },
-                    {
-                        name: "get_workflow_run",
-                        annotations: { title: "Get Workflow Run", readOnlyHint: true },
-                        description: "Get detailed information about a specific workflow run",
-                        inputSchema: zodToJsonSchema(workflows.GetWorkflowRunSchema),
-                    },
-                    {
-                        name: "run_workflow",
-                        annotations: { title: "Run Workflow", readOnlyHint: false, destructiveHint: true },
-                        description: "Run a workflow with optional argument overrides",
-                        inputSchema: zodToJsonSchema(workflows.RunWorkflowSchema),
-                    },
-                    {
-                        name: "list_workflow_schedules",
-                        annotations: { title: "List Workflow Schedules", readOnlyHint: true },
-                        description: "List workflow schedules with optional filtering by workflow ID",
-                        inputSchema: zodToJsonSchema(workflows.ListWorkflowSchedulesSchema),
-                    },
-                ]
-                : []),
-            // Custom Workflows tools (disabled by default, enable via INCLUDE_TOOLKITS=custom_workflows)
-            ...(isToolkitEnabled("custom_workflows", toolkitFilters)
-                ? [
-                    {
-                        name: "create_custom_workflow",
-                        annotations: { title: "Create Custom Workflow", readOnlyHint: false, destructiveHint: false },
-                        description: "Create a new custom workflow from YAML definition. The YAML will be validated before deployment.",
-                        inputSchema: zodToJsonSchema(customWorkflows.CreateCustomWorkflowSchema),
-                    },
-                    {
-                        name: "update_custom_workflow",
-                        annotations: { title: "Update Custom Workflow", readOnlyHint: false, destructiveHint: false },
-                        description: "Update an existing custom workflow with new YAML. Only custom workflows (created via create_custom_workflow) can be updated.",
-                        inputSchema: zodToJsonSchema(customWorkflows.UpdateCustomWorkflowSchema),
-                    },
-                    {
-                        name: "add_workflow_schedule",
-                        annotations: { title: "Add Workflow Schedule", readOnlyHint: false, destructiveHint: false },
-                        description: "Add a cron-based schedule to a workflow. The schedule will trigger the workflow automatically at the specified times.",
-                        inputSchema: zodToJsonSchema(customWorkflows.AddWorkflowScheduleSchema),
-                    },
-                ]
-                : []),
-            // Knowledge Base tools
-            ...(isToolkitEnabled("knowledge_base", toolkitFilters)
-                ? [
-                    {
-                        name: "search_knowledge_base",
-                        annotations: { title: "Search Knowledge Base", readOnlyHint: true },
-                        description: "Search your organization's knowledge base to find relevant uploaded documents, procedures, reports, and other content using natural language queries",
-                        inputSchema: zodToJsonSchema(knowledgeBase.SearchKnowledgeBaseSchema),
-                    },
-                    {
-                        name: "list_knowledge_base_collections",
-                        annotations: { title: "List Knowledge Base Collections", readOnlyHint: true },
-                        description: "List all collections in your organization's knowledge base. Collections are used to organize and categorize documents",
-                        inputSchema: zodToJsonSchema(knowledgeBase.ListCollectionsSchema),
-                    },
-                    {
-                        name: "list_knowledge_base_documents",
-                        annotations: { title: "List Knowledge Base Documents", readOnlyHint: true },
-                        description: "List documents in your organization's knowledge base with optional filtering by collections, file type, or status",
-                        inputSchema: zodToJsonSchema(knowledgeBase.ListDocumentsSchema),
-                    },
-                    {
-                        name: "query_knowledge_base_document",
-                        annotations: { title: "Query Knowledge Base Document", readOnlyHint: true },
-                        description: "Query a CSV document from the knowledge base using natural language. IMPORTANT: This tool ONLY works with CSV documents. Use list_knowledge_base_documents with filters='file_type:csv' to find CSV document IDs (search_knowledge_base results also contain document IDs). Results are returned as a markdown table",
-                        inputSchema: zodToJsonSchema(knowledgeBase.StructuredQueryDocumentSchema),
-                    },
-                ]
-                : []),
-            // RadQL tools
-            ...(isToolkitEnabled("radql", toolkitFilters)
-                ? [
-                    {
-                        name: "radql_list_data_types",
-                        annotations: { title: "RadQL: List Data Types", readOnlyHint: true },
-                        description: "List all available RadQL data types (discovery). ALWAYS call this FIRST before using other RadQL tools to discover what data is available to query. Returns data types like 'containers', 'kubernetes_resources', 'inbox_items', 'cloud_resources', 'cloud_benchmarks', 'cloud_benchmark_summaries', etc. with descriptions.",
-                        inputSchema: zodToJsonSchema(radql.RadQLListDataTypesSchema),
-                    },
-                    {
-                        name: "radql_get_type_metadata",
-                        annotations: { title: "RadQL: Get Type Metadata", readOnlyHint: true },
-                        description: "Get schema/metadata for a specific RadQL data type. Shows available fields, data types, which fields can be filtered/searched, and provides query examples. Call this AFTER radql_list_data_types to understand how to query a specific data type.",
-                        inputSchema: zodToJsonSchema(radql.RadQLGetTypeMetadataSchema),
-                    },
-                    {
-                        name: "radql_list_filter_values",
-                        annotations: { title: "RadQL: List Filter Values", readOnlyHint: true },
-                        description: "List possible values for a filter field (e.g., namespace list, cluster list, severity values). Useful for building dynamic filters when you need to know available enum-like values. Call this when constructing filters that need specific values.",
-                        inputSchema: zodToJsonSchema(radql.RadQLListFilterValuesSchema),
-                    },
-                    {
-                        name: "radql_query",
-                        annotations: { title: "RadQL: Query", readOnlyHint: true },
-                        description: `Execute RadQL queries for security investigations. Supports: list (filter/search), get_by_id (single item), stats (aggregations).
+    const allTools = [
+        // Container tools
+        ...(isToolkitEnabled("containers", toolkitFilters)
+            ? [
+                {
+                    name: "list_containers",
+                    annotations: { title: "List Containers", readOnlyHint: true },
+                    description: "List containers secured by RAD Security with optional filtering by image name, image digest, namespace, cluster_id, or free text search",
+                    inputSchema: zodToJsonSchema(containers.ListContainersSchema),
+                },
+                {
+                    name: "get_container_details",
+                    annotations: { title: "Get Container Details", readOnlyHint: true },
+                    description: "Get detailed information about a container secured by RAD Security",
+                    inputSchema: zodToJsonSchema(containers.GetContainerDetailsSchema),
+                },
+            ]
+            : []),
+        // Cluster tools
+        ...(isToolkitEnabled("clusters", toolkitFilters)
+            ? [
+                {
+                    name: "list_clusters",
+                    annotations: { title: "List Clusters", readOnlyHint: true },
+                    description: "List Kubernetes clusters managed by RAD Security",
+                    inputSchema: zodToJsonSchema(clusters.ListClustersSchema),
+                },
+                {
+                    name: "get_cluster_details",
+                    annotations: { title: "Get Cluster Details", readOnlyHint: true },
+                    description: "Get detailed information about a specific Kubernetes cluster managed by RAD Security",
+                    inputSchema: zodToJsonSchema(clusters.GetClusterDetailsSchema),
+                },
+            ]
+            : []),
+        // Audit tools
+        ...(isToolkitEnabled("audit", toolkitFilters)
+            ? [
+                {
+                    name: "who_shelled_into_pod",
+                    annotations: { title: "Who Shelled Into Pod", readOnlyHint: true },
+                    description: "Get k8s audit logs with information about users who shelled into a pod",
+                    inputSchema: zodToJsonSchema(audit.WhoShelledIntoPodSchema),
+                },
+            ]
+            : []),
+        // Image tools
+        ...(isToolkitEnabled("images", toolkitFilters)
+            ? [
+                {
+                    name: "list_images",
+                    annotations: { title: "List Images", readOnlyHint: true },
+                    description: "List container images with optional filtering by page, page size, sort, and search query",
+                    inputSchema: zodToJsonSchema(images.ListImagesSchema),
+                },
+                {
+                    name: "list_image_vulnerabilities",
+                    annotations: { title: "List Image Vulnerabilities", readOnlyHint: true },
+                    description: "List vulnerabilities in a container image with optional filtering by severity",
+                    inputSchema: zodToJsonSchema(images.ListImageVulnerabilitiesSchema),
+                },
+                {
+                    name: "get_top_vulnerable_images",
+                    annotations: { title: "Get Top Vulnerable Images", readOnlyHint: true },
+                    description: "Get the most vulnerable images from your account",
+                    inputSchema: zodToJsonSchema(z.object({})),
+                },
+                {
+                    name: "get_image_sbom",
+                    annotations: { title: "Get Image SBOM", readOnlyHint: true },
+                    description: "Get the SBOM of a container image",
+                    inputSchema: zodToJsonSchema(images.GetImageSBOMSchema),
+                },
+                {
+                    name: "ignore_cve",
+                    annotations: { title: "Ignore CVE", readOnlyHint: false, destructiveHint: false },
+                    description: "Ignore a CVE for this account so it no longer appears in vulnerability reporting. Use for confirmed false positives, accepted risks, or won't-fix decisions. Do NOT use for remediated CVEs — those drop off automatically on the next scan.",
+                    inputSchema: zodToJsonSchema(cveDispositions.ignoreCveSchema),
+                },
+                {
+                    name: "unignore_cve",
+                    annotations: { title: "Unignore CVE", readOnlyHint: false, destructiveHint: true },
+                    description: "Remove an account-wide CVE disposition, restoring the CVE to vulnerability reporting.",
+                    inputSchema: zodToJsonSchema(cveDispositions.unignoreCveSchema),
+                },
+                {
+                    name: "list_cve_dispositions",
+                    annotations: { title: "List CVE Dispositions", readOnlyHint: true },
+                    description: "List active CVE dispositions (ignored / false positive) for this account, with reason and author.",
+                    inputSchema: zodToJsonSchema(cveDispositions.listCveDispositionsSchema),
+                },
+            ]
+            : []),
+        // Kubernetes Object tools
+        ...(isToolkitEnabled("kubeobject", toolkitFilters)
+            ? [
+                {
+                    name: "get_k8s_resource_details",
+                    annotations: { title: "Get Kubernetes Resource Details", readOnlyHint: true },
+                    description: "Get the latest manifest of a Kubernetes resource",
+                    inputSchema: zodToJsonSchema(kubeobject.GetKubernetesResourceDetailsSchema),
+                },
+                {
+                    name: "list_k8s_resources",
+                    annotations: { title: "List Kubernetes Resources", readOnlyHint: true },
+                    description: "List Kubernetes resources with optional filtering by namespace, resource types, and cluster",
+                    inputSchema: zodToJsonSchema(kubeobject.ListKubernetesResourcesSchema),
+                },
+            ]
+            : []),
+        // Runtime tools
+        ...(isToolkitEnabled("runtime", toolkitFilters)
+            ? [
+                {
+                    name: "get_containers_process_trees",
+                    annotations: { title: "Get Container Process Trees", readOnlyHint: true },
+                    description: "Get process trees for multiple containers",
+                    inputSchema: zodToJsonSchema(runtime.GetContainersProcessTreesSchema),
+                },
+                {
+                    name: "get_containers_baselines",
+                    annotations: { title: "Get Container Baselines", readOnlyHint: true },
+                    description: "Get runtime baselines for multiple containers",
+                    inputSchema: zodToJsonSchema(runtime.GetContainersBaselinesSchema),
+                },
+                {
+                    name: "get_container_llm_analysis",
+                    annotations: { title: "Get Container LLM Analysis", readOnlyHint: true },
+                    description: "Get LLM analysis of a container's process tree",
+                    inputSchema: zodToJsonSchema(runtime.GetContainerLLMAnalysisSchema),
+                },
+            ]
+            : []),
+        // Findings tools
+        ...(isToolkitEnabled("findings", toolkitFilters)
+            ? [
+                {
+                    name: "list_security_findings",
+                    annotations: { title: "List Security Findings", readOnlyHint: true },
+                    description: "List security findings with optional filtering by types, severities, sources, and status",
+                    inputSchema: zodToJsonSchema(findings.listFindingsSchema),
+                },
+                {
+                    name: "update_security_finding_status",
+                    annotations: { title: "Update Security Finding Status", readOnlyHint: false, destructiveHint: false },
+                    description: "Update the status of a security finding",
+                    inputSchema: zodToJsonSchema(findings.updateFindingStatusSchema),
+                },
+            ]
+            : []),
+        // Inbox tools
+        ...(isToolkitEnabled("inbox", toolkitFilters)
+            ? [
+                {
+                    name: "mark_inbox_item_as_false_positive",
+                    annotations: { title: "Mark Inbox Item as False Positive", readOnlyHint: false, destructiveHint: false },
+                    description: "Mark an inbox item as a false positive with a reason",
+                    inputSchema: zodToJsonSchema(inbox.MarkInboxItemAsFalsePositiveSchema),
+                },
+                {
+                    name: "list_inbox_items",
+                    annotations: { title: "List Inbox Items", readOnlyHint: true },
+                    description: "List inbox items with optional filtering by any field. Multiple filters can be combined eg. 'search:cve-2024-12345 and severity:high'",
+                    inputSchema: zodToJsonSchema(inbox.ListInboxItemsSchema),
+                },
+                {
+                    name: "get_inbox_item_details",
+                    annotations: { title: "Get Inbox Item Details", readOnlyHint: true },
+                    description: "Get detailed information about a specific inbox item",
+                    inputSchema: zodToJsonSchema(inbox.GetInboxItemDetailsSchema),
+                },
+            ]
+            : []),
+        // Workflows tools
+        ...(isToolkitEnabled("workflows", toolkitFilters)
+            ? [
+                {
+                    name: "list_workflows",
+                    annotations: { title: "List Workflows", readOnlyHint: true },
+                    description: "List all workflows",
+                    inputSchema: zodToJsonSchema(workflows.ListWorkflowsSchema),
+                },
+                {
+                    name: "get_workflow",
+                    annotations: { title: "Get Workflow", readOnlyHint: true },
+                    description: "Get detailed information about a specific workflow by ID. It contains the workflow definition, default arguments, and schema how to run the workflow",
+                    inputSchema: zodToJsonSchema(workflows.GetWorkflowSchema),
+                },
+                {
+                    name: "list_workflow_runs",
+                    annotations: { title: "List Workflow Runs", readOnlyHint: true },
+                    description: "List workflow runs with optional filtering by workflow ID",
+                    inputSchema: zodToJsonSchema(workflows.ListWorkflowRunsSchema),
+                },
+                {
+                    name: "get_workflow_run",
+                    annotations: { title: "Get Workflow Run", readOnlyHint: true },
+                    description: "Get detailed information about a specific workflow run",
+                    inputSchema: zodToJsonSchema(workflows.GetWorkflowRunSchema),
+                },
+                {
+                    name: "run_workflow",
+                    annotations: { title: "Run Workflow", readOnlyHint: false, destructiveHint: true },
+                    description: "Run a workflow with optional argument overrides",
+                    inputSchema: zodToJsonSchema(workflows.RunWorkflowSchema),
+                },
+                {
+                    name: "list_workflow_schedules",
+                    annotations: { title: "List Workflow Schedules", readOnlyHint: true },
+                    description: "List workflow schedules with optional filtering by workflow ID",
+                    inputSchema: zodToJsonSchema(workflows.ListWorkflowSchedulesSchema),
+                },
+            ]
+            : []),
+        // Custom Workflows tools (disabled by default, enable via INCLUDE_TOOLKITS=custom_workflows)
+        ...(isToolkitEnabled("custom_workflows", toolkitFilters)
+            ? [
+                {
+                    name: "create_custom_workflow",
+                    annotations: { title: "Create Custom Workflow", readOnlyHint: false, destructiveHint: false },
+                    description: "Create a new custom workflow from YAML definition. The YAML will be validated before deployment.",
+                    inputSchema: zodToJsonSchema(customWorkflows.CreateCustomWorkflowSchema),
+                },
+                {
+                    name: "update_custom_workflow",
+                    annotations: { title: "Update Custom Workflow", readOnlyHint: false, destructiveHint: false },
+                    description: "Update an existing custom workflow with new YAML. Only custom workflows (created via create_custom_workflow) can be updated.",
+                    inputSchema: zodToJsonSchema(customWorkflows.UpdateCustomWorkflowSchema),
+                },
+                {
+                    name: "add_workflow_schedule",
+                    annotations: { title: "Add Workflow Schedule", readOnlyHint: false, destructiveHint: false },
+                    description: "Add a cron-based schedule to a workflow. The schedule will trigger the workflow automatically at the specified times.",
+                    inputSchema: zodToJsonSchema(customWorkflows.AddWorkflowScheduleSchema),
+                },
+            ]
+            : []),
+        // Knowledge Base tools
+        ...(isToolkitEnabled("knowledge_base", toolkitFilters)
+            ? [
+                {
+                    name: "search_knowledge_base",
+                    annotations: { title: "Search Knowledge Base", readOnlyHint: true },
+                    description: "Search your organization's knowledge base to find relevant uploaded documents, procedures, reports, and other content using natural language queries",
+                    inputSchema: zodToJsonSchema(knowledgeBase.SearchKnowledgeBaseSchema),
+                },
+                {
+                    name: "list_knowledge_base_collections",
+                    annotations: { title: "List Knowledge Base Collections", readOnlyHint: true },
+                    description: "List all collections in your organization's knowledge base. Collections are used to organize and categorize documents",
+                    inputSchema: zodToJsonSchema(knowledgeBase.ListCollectionsSchema),
+                },
+                {
+                    name: "list_knowledge_base_documents",
+                    annotations: { title: "List Knowledge Base Documents", readOnlyHint: true },
+                    description: "List documents in your organization's knowledge base with optional filtering by collections, file type, or status",
+                    inputSchema: zodToJsonSchema(knowledgeBase.ListDocumentsSchema),
+                },
+                {
+                    name: "query_knowledge_base_document",
+                    annotations: { title: "Query Knowledge Base Document", readOnlyHint: true },
+                    description: "Query a CSV document from the knowledge base using natural language. IMPORTANT: This tool ONLY works with CSV documents. Use list_knowledge_base_documents with filters='file_type:csv' to find CSV document IDs (search_knowledge_base results also contain document IDs). Results are returned as a markdown table",
+                    inputSchema: zodToJsonSchema(knowledgeBase.StructuredQueryDocumentSchema),
+                },
+            ]
+            : []),
+        // RadQL tools
+        ...(isToolkitEnabled("radql", toolkitFilters)
+            ? [
+                {
+                    name: "radql_list_data_types",
+                    annotations: { title: "RadQL: List Data Types", readOnlyHint: true },
+                    description: "List all available RadQL data types (discovery). ALWAYS call this FIRST before using other RadQL tools to discover what data is available to query. Returns data types like 'containers', 'kubernetes_resources', 'inbox_items', 'cloud_resources', 'cloud_benchmarks', 'cloud_benchmark_summaries', etc. with descriptions.",
+                    inputSchema: zodToJsonSchema(radql.RadQLListDataTypesSchema),
+                },
+                {
+                    name: "radql_get_type_metadata",
+                    annotations: { title: "RadQL: Get Type Metadata", readOnlyHint: true },
+                    description: "Get schema/metadata for a specific RadQL data type. Shows available fields, data types, which fields can be filtered/searched, and provides query examples. Call this AFTER radql_list_data_types to understand how to query a specific data type.",
+                    inputSchema: zodToJsonSchema(radql.RadQLGetTypeMetadataSchema),
+                },
+                {
+                    name: "radql_list_filter_values",
+                    annotations: { title: "RadQL: List Filter Values", readOnlyHint: true },
+                    description: "List possible values for a filter field (e.g., namespace list, cluster list, severity values). Useful for building dynamic filters when you need to know available enum-like values. Call this when constructing filters that need specific values.",
+                    inputSchema: zodToJsonSchema(radql.RadQLListFilterValuesSchema),
+                },
+                {
+                    name: "radql_query",
+                    annotations: { title: "RadQL: Query", readOnlyHint: true },
+                    description: `Execute RadQL queries for security investigations. Supports: list (filter/search), get_by_id (single item), stats (aggregations).
 
 WORKFLOW: radql_list_data_types -> radql_get_type_metadata -> radql_query
 
@@ -411,83 +436,90 @@ OK to leave unquoted:
   - Simple wildcards: name:nginx*
 
 For complete schema: call radql_get_type_metadata with target data_type`,
-                        inputSchema: zodToJsonSchema(radql.RadQLQuerySchema),
-                    },
-                    {
-                        name: "radql_query_builder",
-                        annotations: { title: "RadQL: Query Builder", readOnlyHint: true },
-                        description: "Helper tool to build RadQL queries programmatically from structured conditions. Useful when you need to construct complex filter or stats queries from structured inputs.",
-                        inputSchema: zodToJsonSchema(radql.RadQLQueryBuilderSchema),
-                    },
-                    {
-                        name: "radql_batch_query",
-                        annotations: { title: "RadQL: Batch Query", readOnlyHint: true },
-                        description: "Execute multiple RadQL queries in parallel for efficiency. Useful for fetching related data from different data types simultaneously (e.g., container details + vulnerabilities + network connections).",
-                        inputSchema: zodToJsonSchema(radql.RadQLBatchQuerySchema),
-                    },
-                ]
-                : []),
-            // Dashboards tools
-            ...(isToolkitEnabled("dashboards", toolkitFilters)
-                ? [
-                    {
-                        name: "list_widget_templates",
-                        annotations: { title: "List Widget Templates", readOnlyHint: true },
-                        description: "List widget templates with optional filtering by visualization type and category",
-                        inputSchema: zodToJsonSchema(dashboards.ListWidgetTemplatesSchema),
-                    },
-                    {
-                        name: "get_widget_template",
-                        annotations: { title: "Get Widget Template", readOnlyHint: true },
-                        description: "Get detailed information about a specific widget template",
-                        inputSchema: zodToJsonSchema(dashboards.GetWidgetTemplateSchema),
-                    },
-                    {
-                        name: "list_dashboard_templates",
-                        annotations: { title: "List Dashboard Templates", readOnlyHint: true },
-                        description: "List dashboard templates with optional filtering by category",
-                        inputSchema: zodToJsonSchema(dashboards.ListDashboardTemplatesSchema),
-                    },
-                    {
-                        name: "get_dashboard_template",
-                        annotations: { title: "Get Dashboard Template", readOnlyHint: true },
-                        description: "Get detailed information about a specific dashboard template",
-                        inputSchema: zodToJsonSchema(dashboards.GetDashboardTemplateSchema),
-                    },
-                    {
-                        name: "list_dashboards",
-                        annotations: { title: "List Dashboards", readOnlyHint: true },
-                        description: "List dashboards for the account",
-                        inputSchema: zodToJsonSchema(dashboards.ListDashboardsSchema),
-                    },
-                    {
-                        name: "get_dashboard",
-                        annotations: { title: "Get Dashboard", readOnlyHint: true },
-                        description: "Get detailed information about a specific dashboard",
-                        inputSchema: zodToJsonSchema(dashboards.GetDashboardSchema),
-                    },
-                ]
-                : []),
-            // Integrations tools
-            ...(isToolkitEnabled("integrations", toolkitFilters)
-                ? [
-                    {
-                        name: "list_external_integrations",
-                        annotations: { title: "List External Integrations", readOnlyHint: true },
-                        description: "List external integrations configured for the tenant (e.g., Slack, AWS CloudTrail, Okta). Returns integration details including capabilities, configuration, mcp support and sync status.",
-                        inputSchema: zodToJsonSchema(integrations.ListExternalIntegrationsSchema),
-                    },
-                ]
-                : []),
-        ];
-        return {
-            tools: allTools,
-        };
-    });
+                    inputSchema: zodToJsonSchema(radql.RadQLQuerySchema),
+                },
+                {
+                    name: "radql_query_builder",
+                    annotations: { title: "RadQL: Query Builder", readOnlyHint: true },
+                    description: "Helper tool to build RadQL queries programmatically from structured conditions. Useful when you need to construct complex filter or stats queries from structured inputs.",
+                    inputSchema: zodToJsonSchema(radql.RadQLQueryBuilderSchema),
+                },
+                {
+                    name: "radql_batch_query",
+                    annotations: { title: "RadQL: Batch Query", readOnlyHint: true },
+                    description: "Execute multiple RadQL queries in parallel for efficiency. Useful for fetching related data from different data types simultaneously (e.g., container details + vulnerabilities + network connections).",
+                    inputSchema: zodToJsonSchema(radql.RadQLBatchQuerySchema),
+                },
+            ]
+            : []),
+        // Dashboards tools
+        ...(isToolkitEnabled("dashboards", toolkitFilters)
+            ? [
+                {
+                    name: "list_widget_templates",
+                    annotations: { title: "List Widget Templates", readOnlyHint: true },
+                    description: "List widget templates with optional filtering by visualization type and category",
+                    inputSchema: zodToJsonSchema(dashboards.ListWidgetTemplatesSchema),
+                },
+                {
+                    name: "get_widget_template",
+                    annotations: { title: "Get Widget Template", readOnlyHint: true },
+                    description: "Get detailed information about a specific widget template",
+                    inputSchema: zodToJsonSchema(dashboards.GetWidgetTemplateSchema),
+                },
+                {
+                    name: "list_dashboard_templates",
+                    annotations: { title: "List Dashboard Templates", readOnlyHint: true },
+                    description: "List dashboard templates with optional filtering by category",
+                    inputSchema: zodToJsonSchema(dashboards.ListDashboardTemplatesSchema),
+                },
+                {
+                    name: "get_dashboard_template",
+                    annotations: { title: "Get Dashboard Template", readOnlyHint: true },
+                    description: "Get detailed information about a specific dashboard template",
+                    inputSchema: zodToJsonSchema(dashboards.GetDashboardTemplateSchema),
+                },
+                {
+                    name: "list_dashboards",
+                    annotations: { title: "List Dashboards", readOnlyHint: true },
+                    description: "List dashboards for the account",
+                    inputSchema: zodToJsonSchema(dashboards.ListDashboardsSchema),
+                },
+                {
+                    name: "get_dashboard",
+                    annotations: { title: "Get Dashboard", readOnlyHint: true },
+                    description: "Get detailed information about a specific dashboard",
+                    inputSchema: zodToJsonSchema(dashboards.GetDashboardSchema),
+                },
+            ]
+            : []),
+        // Integrations tools
+        ...(isToolkitEnabled("integrations", toolkitFilters)
+            ? [
+                {
+                    name: "list_external_integrations",
+                    annotations: { title: "List External Integrations", readOnlyHint: true },
+                    description: "List external integrations configured for the tenant (e.g., Slack, AWS CloudTrail, Okta). Returns integration details including capabilities, configuration, mcp support and sync status.",
+                    inputSchema: zodToJsonSchema(integrations.ListExternalIntegrationsSchema),
+                },
+            ]
+            : []),
+    ];
+    // In read-only mode, expose only tools whose readOnlyHint is true.
+    const tools = toolkitFilters.readonly
+        ? allTools.filter((t) => t.annotations
+            ?.readOnlyHint === true)
+        : allTools;
+    // The advertised set is also the allowed set — CallTool enforces it below.
+    const enabledToolNames = new Set(tools.map((t) => t.name));
+    server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools }));
     server.setRequestHandler(CallToolRequestSchema, async (request) => {
         const startTime = Date.now();
         const toolName = request.params.name;
         try {
+            if (!enabledToolNames.has(toolName)) {
+                throw new Error(`Tool "${toolName}" is not enabled for this session`);
+            }
             if (!request.params.arguments) {
                 throw new Error("Arguments are required");
             }
@@ -1032,7 +1064,7 @@ async function main() {
         }
         if (transportType === "stdio") {
             const transport = new StdioServerTransport();
-            const server = await newServer(RadSecurityClient.fromEnv());
+            const server = await newServer(RadSecurityClient.fromEnv(), parseToolkitFilters());
             await server.connect(transport);
             logger.info({ transport: "stdio" }, "server_ready");
         }
@@ -1068,7 +1100,7 @@ async function main() {
                 transport.onclose = () => {
                     delete transports[transport.sessionId];
                 };
-                const server = await newServer(RadSecurityClient.fromEnv());
+                const server = await newServer(RadSecurityClient.fromEnv(), parseToolkitFilters());
                 await server.connect(transport);
             });
             app.post("/messages", async (req, res) => {
@@ -1096,6 +1128,9 @@ async function main() {
                     "Authorization",
                     "mcp-session-id",
                     "mcp-protocol-version",
+                    "X-Rad-Toolkits",
+                    "X-Rad-Exclude-Toolkits",
+                    "X-Rad-Readonly",
                 ],
                 exposedHeaders: ["mcp-session-id"],
             }));
@@ -1150,7 +1185,7 @@ async function main() {
                             delete transports[transport.sessionId];
                         }
                     };
-                    const server = await newServer(client);
+                    const server = await newServer(client, toolkitFiltersForRequest(req));
                     // Connect to the MCP server
                     await server.connect(transport);
                 }