@robinmordasiewicz/f5xc-terraform-mcp 3.11.0 → 3.11.2

package/README.md

@@ -70,7 +70,7 @@ docker run -p 8080:8080 ghcr.io/modelcontextprotocol/registry:v1.0.0
 docker run -p 8080:8080 ghcr.io/modelcontextprotocol/registry:main-20250906-abc123d
 ```
 
-**Available tags:**
+**Available tags:** 
 - **Releases**: `latest`, `v1.0.0`, `v1.1.0`, etc.
 - **Continuous**: `main` (latest main branch build)
 - **Development**: `main-<date>-<sha>` (specific commit builds)

package/dist/docs/data-sources/bgp.md

@@ -2,12 +2,12 @@
 page_title: "f5xc_bgp Data Source - terraform-provider-f5xc"
 subcategory: "Networking"
 description: |-
-  Manages a BGP resource in F5 Distributed Cloud for bgp object is the configuration for peering with external bgp servers. it is created by users in system namespace. configuration.
+  Manages bgp_asn_set creates a new object in the storage backend for metadata.namespace. in F5 Distributed Cloud.
 ---
 
 # f5xc_bgp (Data Source)
 
-Manages a BGP resource in F5 Distributed Cloud for bgp object is the configuration for peering with external bgp servers. it is created by users in system namespace. configuration.
+Manages bgp_asn_set creates a new object in the storage backend for metadata.namespace. in F5 Distributed Cloud.
 
 ~> **Note** For more information about this data source, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
 

package/dist/docs/data-sources/certificate.md

@@ -2,12 +2,12 @@
 page_title: "f5xc_certificate Data Source - terraform-provider-f5xc"
 subcategory: "Certificates"
 description: |-
-  Manages a Certificate resource in F5 Distributed Cloud for TLS/SSL certificate management.
+  Manages a Certificate resource in F5 Distributed Cloud for certificate. configuration.
 ---
 
 # f5xc_certificate (Data Source)
 
-Manages a Certificate resource in F5 Distributed Cloud for TLS/SSL certificate management.
+Manages a Certificate resource in F5 Distributed Cloud for certificate. configuration.
 
 ~> **Note** For more information about this data source, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
 

package/dist/docs/data-sources/discovery.md

@@ -2,12 +2,12 @@
 page_title: "f5xc_discovery Data Source - terraform-provider-f5xc"
 subcategory: "Applications"
 description: |-
-  Manages a Discovery resource in F5 Distributed Cloud for api to create discovery object for a site or virtual site in system namespace. configuration.
+  Manages API discovery creates a new object in the storage backend for metadata.namespace. in F5 Distributed Cloud.
 ---
 
 # f5xc_discovery (Data Source)
 
-Manages a Discovery resource in F5 Distributed Cloud for api to create discovery object for a site or virtual site in system namespace. configuration.
+Manages API discovery creates a new object in the storage backend for metadata.namespace. in F5 Distributed Cloud.
 
 ~> **Note** For more information about this data source, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
 

package/dist/docs/data-sources/log_receiver.md

@@ -2,12 +2,12 @@
 page_title: "f5xc_log_receiver Data Source - terraform-provider-f5xc"
 subcategory: "Monitoring"
 description: |-
-  Manages new Log Receiver object. in F5 Distributed Cloud.
+  Manages new Global Log Receiver object. in F5 Distributed Cloud.
 ---
 
 # f5xc_log_receiver (Data Source)
 
-Manages new Log Receiver object. in F5 Distributed Cloud.
+Manages new Global Log Receiver object. in F5 Distributed Cloud.
 
 ~> **Note** For more information about this data source, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
 

package/dist/docs/data-sources/namespace.md

@@ -0,0 +1,141 @@
+---
+page_title: "f5xc_namespace Data Source - terraform-provider-f5xc"
+subcategory: "Organization"
+description: |-
+  Manages new namespace. Name of the object is name of the name space. in F5 Distributed Cloud.
+---
+
+# f5xc_namespace (Data Source)
+
+Manages new namespace. Name of the object is name of the name space. in F5 Distributed Cloud.
+
+~> **Note** For more information about this data source, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
+
+## Example Usage
+
+```terraform
+# Namespace Data Source Example
+# Retrieves information about an existing Namespace
+
+# Look up an existing Namespace by name
+data "f5xc_namespace" "example" {
+  name      = "example-namespace"
+  namespace = "system"
+}
+
+# Example: Use the data source in another resource
+# output "namespace_id" {
+#   value = data.f5xc_namespace.example.id
+# }
+
+# Example: Create resources in a namespace discovered via data source
+# resource "f5xc_origin_pool" "example" {
+#   name      = "example-pool"
+#   namespace = data.f5xc_namespace.example.name
+#   # ... other configuration
+# }
+```
+
+<!-- schema generated by tfplugindocs -->
+## Argument Reference
+
+### Metadata Argument Reference
+
+<a id="name"></a>&#x2022; [`name`](#name) - Required String<br>Name of the Namespace
+
+<a id="namespace"></a>&#x2022; [`namespace`](#namespace) - Required String<br>Namespace where the Namespace exists
+
+### Attributes Reference
+
+In addition to all arguments above, the following attributes are exported:
+
+<a id="annotations"></a>&#x2022; [`annotations`](#annotations) - Optional Map<br>Annotations applied to this resource
+
+<a id="description"></a>&#x2022; [`description`](#description) - Optional String<br>Description of the Namespace
+
+<a id="id"></a>&#x2022; [`id`](#id) - Optional String<br>Unique identifier for the resource
+
+<a id="labels"></a>&#x2022; [`labels`](#labels) - Optional Map<br>Labels applied to this resource
+
+---
+
+## Common Types
+
+The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
+
+### Object Reference {#common-object-reference}
+
+Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
+
+| Field | Type | Description |
+| ----- | ---- | ----------- |
+| `name` | String | Name of the referenced object |
+| `namespace` | String | Namespace containing the referenced object |
+| `tenant` | String | Tenant of the referenced object (system-managed) |
+
+### Transformers {#common-transformers}
+
+Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
+
+| Value | Description |
+| ----- | ----------- |
+| `LOWER_CASE` | Convert to lowercase |
+| `UPPER_CASE` | Convert to uppercase |
+| `BASE64_DECODE` | Decode base64 content |
+| `NORMALIZE_PATH` | Normalize URL path |
+| `REMOVE_WHITESPACE` | Remove whitespace characters |
+| `URL_DECODE` | Decode URL-encoded characters |
+| `TRIM_LEFT` | Trim leading whitespace |
+| `TRIM_RIGHT` | Trim trailing whitespace |
+| `TRIM` | Trim both leading and trailing whitespace |
+
+### HTTP Methods {#common-http-methods}
+
+HTTP methods used for request matching.
+
+| Value | Description |
+| ----- | ----------- |
+| `ANY` | Match any HTTP method |
+| `GET` | HTTP GET request |
+| `HEAD` | HTTP HEAD request |
+| `POST` | HTTP POST request |
+| `PUT` | HTTP PUT request |
+| `DELETE` | HTTP DELETE request |
+| `CONNECT` | HTTP CONNECT request |
+| `OPTIONS` | HTTP OPTIONS request |
+| `TRACE` | HTTP TRACE request |
+| `PATCH` | HTTP PATCH request |
+| `COPY` | HTTP COPY request (WebDAV) |
+
+### TLS Fingerprints {#common-tls-fingerprints}
+
+TLS fingerprint categories for malicious client detection.
+
+| Value | Description |
+| ----- | ----------- |
+| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
+| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
+| `ADWARE` | Adware-associated fingerprints |
+| `DRIDEX` | Dridex malware fingerprints |
+| `GOOTKIT` | Gootkit malware fingerprints |
+| `RANSOMWARE` | Ransomware-associated fingerprints |
+| `TRICKBOT` | Trickbot malware fingerprints |
+
+### IP Threat Categories {#common-ip-threat-categories}
+
+IP address threat categories for security filtering.
+
+| Value | Description |
+| ----- | ----------- |
+| `SPAM_SOURCES` | Known spam sources |
+| `WINDOWS_EXPLOITS` | Windows exploit sources |
+| `WEB_ATTACKS` | Web attack sources |
+| `BOTNETS` | Known botnet IPs |
+| `SCANNERS` | Network scanner IPs |
+| `REPUTATION` | Poor reputation IPs |
+| `PHISHING` | Phishing-related IPs |
+| `PROXY` | Anonymous proxy IPs |
+| `MOBILE_THREATS` | Mobile threat sources |
+| `TOR_PROXY` | Tor exit nodes |
+| `DENIAL_OF_SERVICE` | DoS attack sources |
+| `NETWORK` | Known bad network ranges |

package/dist/docs/data-sources/site.md

@@ -2,12 +2,12 @@
 page_title: "f5xc_site Data Source - terraform-provider-f5xc"
 subcategory: "Uncategorized"
 description: |-
-  Manages a Site resource in F5 Distributed Cloud for gcp vpc site specification. configuration.
+  Manages a Site resource in F5 Distributed Cloud for azure vnet site specification. configuration.
 ---
 
 # f5xc_site (Data Source)
 
-Manages a Site resource in F5 Distributed Cloud for gcp vpc site specification. configuration.
+Manages a Site resource in F5 Distributed Cloud for azure vnet site specification. configuration.
 
 ~> **Note** For more information about this data source, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
 

package/dist/docs/data-sources/workload.md

@@ -2,12 +2,12 @@
 page_title: "f5xc_workload Data Source - terraform-provider-f5xc"
 subcategory: "Kubernetes"
 description: |-
-  Manages a Workload resource in F5 Distributed Cloud for workload. configuration.
+  Manages workload_flavor. in F5 Distributed Cloud.
 ---
 
 # f5xc_workload (Data Source)
 
-Manages a Workload resource in F5 Distributed Cloud for workload. configuration.
+Manages workload_flavor. in F5 Distributed Cloud.
 
 ~> **Note** For more information about this data source, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
 

package/dist/docs/index.md

@@ -1,152 +1,276 @@
 ---
-title: F5 Distributed Cloud Terraform Provider
+page_title: "F5XC Provider"
+description: |-
+  Terraform provider for F5 Distributed Cloud (F5XC) enabling infrastructure as code for load balancers, security policies, sites, and networking. Community-maintained provider built from public F5 API documentation.
 ---
 
-# F5 Distributed Cloud Terraform Provider
-
-<div class="landing-page">
-
-<div class="hero">
-  <h2>Manage F5 Distributed Cloud Resources with Terraform</h2>
-  <p>Community-driven Terraform provider for F5 Distributed Cloud (F5XC) built using the HashiCorp Terraform Plugin Framework. Implements F5's public OpenAPI specifications to manage F5XC resources via Infrastructure as Code.</p>
-
-  <div class="buttons">
-    <a href="getting-started/installation/" class="md-button md-button--primary">Get Started</a>
-    <a href="https://registry.terraform.io/providers/robinmordasiewicz/f5xc/latest" class="md-button">Terraform Registry</a>
-  </div>
-</div>
-
-## Key Features
-
-<div class="feature-grid">
-  <div class="feature">
-    <div class="feature-icon">🚀</div>
-    <h3>Complete Resource Coverage</h3>
-    <p>Manage HTTP load balancers, namespaces, security policies, and more through Terraform</p>
-  </div>
-
-  <div class="feature">
-    <div class="feature-icon">🔒</div>
-    <h3>Secure Authentication</h3>
-    <p>Support for API tokens and P12 certificate authentication</p>
-  </div>
-
-  <div class="feature">
-    <div class="feature-icon">📖</div>
-    <h3>OpenAPI-Based</h3>
-    <p>Automatically generated from F5's official OpenAPI specifications</p>
-  </div>
-
-  <div class="feature">
-    <div class="feature-icon">🧪</div>
-    <h3>Well-Tested</h3>
-    <p>Comprehensive acceptance tests ensure reliability</p>
-  </div>
-
-  <div class="feature">
-    <div class="feature-icon">🔄</div>
-    <h3>Import Support</h3>
-    <p>Import existing F5XC resources into Terraform state</p>
-  </div>
-
-  <div class="feature">
-    <div class="feature-icon">🛠️</div>
-    <h3>Provider Functions</h3>
-    <p>Utility functions for Secret Management and more</p>
-  </div>
-</div>
-
-## Quick Example
+# F5XC Provider
+
+The F5XC Terraform provider enables infrastructure as code management for F5 Distributed Cloud (F5XC) resources. Configure HTTP/TCP load balancers, origin pools, application firewalls, service policies, cloud sites, and more through declarative Terraform configurations.
+
+This is a community-maintained provider built from public F5 API documentation.
+
+## Requirements
+
+| Name      | Version |
+|-----------|---------|
+| terraform | >= 1.8  |
+
+-> **Note:** This provider uses provider-defined functions which require Terraform 1.8 or later. For details, see the [Functions](/docs/functions) documentation.
+
+## Authenticating to F5 Distributed Cloud
+
+The F5XC Terraform provider supports multiple authentication methods:
+
+1. **API Token** - Simplest method using a personal API token
+2. **P12 Certificate** - Certificate-based authentication using PKCS#12 bundle
+3. **PEM Certificate** - Certificate-based authentication using separate cert/key files
+
+Learn more about [how to generate API credentials](https://docs.cloud.f5.com/docs/how-to/user-mgmt/credentials).
+
+## Example Usage
+
+```terraform
+# Configure the F5XC Provider with API Token Authentication
+provider "f5xc" {
+  api_url   = "https://your-tenant.console.ves.volterra.io"
+  api_token = var.f5xc_api_token
+}
+
+# Alternatively, use environment variables:
+# export F5XC_API_URL="https://your-tenant.console.ves.volterra.io"
+# export F5XC_API_TOKEN="your-api-token"
+
+variable "f5xc_api_token" {
+  description = "F5 Distributed Cloud API Token"
+  type        = string
+  sensitive   = true
+}
+
+# Or use P12 Certificate Authentication:
+# provider "f5xc" {
+#   api_url      = "https://your-tenant.console.ves.volterra.io"
+#   api_p12_file = "/path/to/certificate.p12"
+#   p12_password = var.f5xc_p12_password
+# }
+#
+# Environment variables for P12 authentication:
+# export F5XC_API_URL="https://your-tenant.console.ves.volterra.io"
+# export F5XC_P12_FILE="/path/to/certificate.p12"
+# export F5XC_P12_PASSWORD="your-p12-password"
+```
+
+## Argument Reference
+
+### Required (one of the following authentication methods)
+
+* `api_token` - F5 Distributed Cloud API Token (`String`, Sensitive). Can also be set via `F5XC_API_TOKEN` environment variable.
+
+* `api_p12_file` - Path to PKCS#12 certificate bundle file (`String`). Can also be set via `F5XC_P12_FILE` environment variable. Requires `p12_password`.
+
+* `api_cert` and `api_key` - Paths to PEM-encoded certificate and private key files (`String`). Can also be set via `F5XC_CERT` and `F5XC_KEY` environment variables.
+
+### Optional
+
+* `api_url` - F5 Distributed Cloud API URL (`String`). Base URL **without** `/api` suffix. Defaults to `https://console.ves.volterra.io`. Can also be set via `F5XC_API_URL` environment variable.
+
+* `p12_password` - Password for PKCS#12 certificate bundle (`String`, Sensitive). Required when using `api_p12_file`. Can also be set via `F5XC_P12_PASSWORD` environment variable.
+
+* `api_ca_cert` - Path to PEM-encoded CA certificate file (`String`). Optional, used for server certificate verification. Can also be set via `F5XC_CACERT` environment variable.
+
+## Authentication Options
+
+### Option 1: API Token Authentication
+
+The simplest authentication method using a personal API token.
+
+**Provider Configuration:**
 
 ```hcl
-terraform {
-  required_providers {
-    f5xc = {
-      source  = "robinmordasiewicz/f5xc"
-      version = "~> 3.0"
-    }
-  }
+provider "f5xc" {
+  api_url   = "https://your-tenant.console.ves.volterra.io"
+  api_token = var.f5xc_api_token
 }
+```
+
+**Environment Variables:**
+
+```bash
+export F5XC_API_URL="https://your-tenant.console.ves.volterra.io"
+export F5XC_API_TOKEN="your-api-token"
+```
+
+### Option 2: P12 Certificate Authentication
+
+Certificate-based authentication using a PKCS#12 bundle downloaded from F5 Distributed Cloud.
+
+**Provider Configuration:**
+
+```hcl
+provider "f5xc" {
+  api_url      = "https://your-tenant.console.ves.volterra.io"
+  api_p12_file = "/path/to/certificate.p12"
+  p12_password = var.f5xc_p12_password
+}
+```
+
+**Environment Variables:**
+
+```bash
+export F5XC_API_URL="https://your-tenant.console.ves.volterra.io"
+export F5XC_P12_FILE="/path/to/certificate.p12"
+export F5XC_P12_PASSWORD="your-p12-password"
+```
+
+### Option 3: PEM Certificate Authentication
 
+Certificate-based authentication using separate PEM-encoded certificate and key files.
+
+**Provider Configuration:**
+
+```hcl
 provider "f5xc" {
-  api_url = "https://console.ves.volterra.io"
-  # api_token set via F5XC_API_TOKEN environment variable
+  api_url     = "https://your-tenant.console.ves.volterra.io"
+  api_cert    = "/path/to/certificate.crt"
+  api_key     = "/path/to/private.key"
+  api_ca_cert = "/path/to/ca-certificate.crt"  # Optional
 }
+```
+
+**Environment Variables:**
+
+```bash
+export F5XC_API_URL="https://your-tenant.console.ves.volterra.io"
+export F5XC_CERT="/path/to/certificate.crt"
+export F5XC_KEY="/path/to/private.key"
+export F5XC_CACERT="/path/to/ca-certificate.crt"  # Optional
+```
+
+-> **Note:** Environment variables are the recommended approach for CI/CD pipelines and to avoid storing sensitive credentials in version control.
+
+## Getting Started
+
+1. **Generate API Credentials**: Navigate to your F5 Distributed Cloud console, go to **Administration** > **Personal Management** > **Credentials**, and create either an API Token or download a certificate bundle.
+
+2. **Configure the Provider**: Add the provider configuration to your Terraform files using one of the authentication options above.
+
+3. **Create Resources**: Start managing F5XC resources like namespaces, load balancers, and origin pools.
 
+### Example: Create a Namespace
+
+```hcl
 resource "f5xc_namespace" "example" {
   name = "example-namespace"
 }
+```
 
+### Example: Create an HTTP Load Balancer
+
+```hcl
 resource "f5xc_http_loadbalancer" "example" {
-  name      = "example-lb"
-  namespace = f5xc_namespace.example.name
+  name      = "example-load-balancer"
+  namespace = "example-namespace"
+  domains   = ["example.com"]
+}
+```
 
-  domains = ["example.com"]
+## MCP Configuration
 
-  https_auto_cert {
-    http_redirect       = true
-    add_hsts            = false
-    no_mtls             = true
-    default_header      = true
-    enable_path_normalize = true
-  }
+This provider includes a Model Context Protocol (MCP) server that enables AI assistants like Claude to interact with F5 Distributed Cloud resources. The MCP server provides schema information, documentation, and example configurations.
+
+### Quick Setup for Claude Desktop
 
-  default_route_pools {
-    pool {
-      name      = f5xc_origin_pool.example.name
-      namespace = f5xc_namespace.example.name
+Add the following to your Claude Desktop configuration file:
+
+**macOS:** `~/Library/Application Support/Claude/claude_desktop_config.json`
+**Windows:** `%APPDATA%\Claude\claude_desktop_config.json`
+
+```json
+{
+  "mcpServers": {
+    "f5xc-terraform": {
+      "command": "npx",
+      "args": ["@robinmordasiewicz/f5xc-terraform-mcp"]
     }
-    weight   = 1
-    priority = 1
   }
-
-  advertise_on_public_default_vip = true
 }
 ```
 
-## Getting Started
+### Quick Setup for Claude Code (CLI)
 
-<div class="highlight-boxes">
-  <div class="highlight">
-    <h3>📦 Installation</h3>
-    <p>Install the provider from the Terraform Registry</p>
-    <a href="getting-started/installation/">Learn more →</a>
-  </div>
+Install the MCP server with a single command:
 
-  <div class="highlight">
-    <h3>🔐 Authentication</h3>
-    <p>Configure API token or P12 certificate authentication</p>
-    <a href="getting-started/authentication/">Learn more →</a>
-  </div>
+```bash
+claude mcp add f5xc-terraform -- npx -y @robinmordasiewicz/f5xc-terraform-mcp
+```
 
-  <div class="highlight">
-    <h3>⚡ Quick Start</h3>
-    <p>Deploy your first F5XC resource in minutes</p>
-    <a href="getting-started/quick-start/">Learn more →</a>
-  </div>
-</div>
+**Scope Options:**
 
-## Resources
+* `--scope local` (default) - Available only in the current directory
+* `--scope user` - Available in all your Claude Code sessions
+* `--scope project` - Shared with anyone who clones the repository (saved in `.mcp.json`)
 
-Explore the available resources and data sources:
+Example with user scope (recommended for personal use):
 
-- **[Resources](resources/)**: Create and manage F5XC infrastructure
-- **[Data Sources](data-sources/)**: Query existing F5XC resources
-- **[Functions](functions/)**: Utility functions for advanced use cases
-- **[Guides](guides/)**: Step-by-step tutorials for common scenarios
+```bash
+claude mcp add --scope user f5xc-terraform -- npx -y @robinmordasiewicz/f5xc-terraform-mcp
+```
 
-## Community & Support
+**Verify Installation:**
 
-This is a community-driven provider. Contributions are welcome!
+```bash
+claude mcp list
+```
 
-- **GitHub**: [robinmordasiewicz/terraform-provider-f5xc](https://github.com/robinmordasiewicz/terraform-provider-f5xc)
-- **Issues**: [Report bugs or request features](https://github.com/robinmordasiewicz/terraform-provider-f5xc/issues)
-- **Contributing**: [Development guide](contributing/development/)
+You should see `f5xc-terraform` listed with a `✓ Connected` status.
 
----
+### Quick Setup for Visual Studio Code
+
+VS Code 1.99+ supports MCP servers through GitHub Copilot. Choose the installation method that best fits your environment:
+
+#### Option 1: Workspace Configuration (Recommended)
+
+Create a `.vscode/mcp.json` file in your workspace:
+
+```json
+{
+  "servers": {
+    "f5xc-terraform": {
+      "command": "npx",
+      "args": ["-y", "@robinmordasiewicz/f5xc-terraform-mcp"]
+    }
+  }
+}
+```
+
+#### Option 2: Corporate Environments (No Node.js Required)
+
+For environments where npm/Node.js cannot be installed:
+
+1. Download the latest `.mcpb` bundle from [GitHub Releases](https://github.com/robinmordasiewicz/terraform-provider-f5xc/releases)
+2. Place the file in a known location (e.g., `~/.mcp/f5xc-terraform-mcp.mcpb`)
+3. Create a `.vscode/mcp.json` file:
+
+```json
+{
+  "servers": {
+    "f5xc-terraform": {
+      "command": "/path/to/f5xc-terraform-mcp.mcpb"
+    }
+  }
+}
+```
+
+#### Verify Installation
+
+1. Press `Ctrl+Shift+P` / `Cmd+Shift+P`
+2. Run `MCP: List Servers`
+3. Look for `f5xc-terraform` with a green status indicator
+
+For complete MCP server documentation including all available tools and advanced configuration options, see the [NPM package page](https://www.npmjs.com/package/@robinmordasiewicz/f5xc-terraform-mcp).
+
+## Resources and Data Sources
 
-<div class="footer-note">
-Built with ❤️ by the community • <a href="https://registry.terraform.io/providers/robinmordasiewicz/f5xc/latest">View on Terraform Registry</a>
-</div>
+Browse the documentation sidebar for the complete list of resources and data sources organized by category.
 
-</div>
+<!-- Template version: 1.0.1 - MCP token optimization (#592) -->