@sarthakpranesh/mcp-lazy-proxy 0.1.2 → 0.1.4

package/README.md

@@ -34,21 +34,23 @@ Other lazy MCP proxies are all-or-nothing: they either keep every backend lazy o
 
 ## Quick start
 
-**Requirements:** Node.js 18+. Install and build:
+The proxy runs in one of two modes:
 
-```bash
-npm install
-npm run build
-```
+| Mode | How it runs | Traffic flow |
+| ---- | ----------- | ------------ |
+| **Stdio (local)** | Spawned as a subprocess by your MCP client (default). | Proxy talks to backends directly from your machine. **No network server is started and no remote proxy call is made** — it all happens in-process over stdio, local to your client. Best for a single machine. |
+| **Self-hosted HTTP (shared)** | Runs as a long-lived HTTP server (e.g. in Docker) on one host. | The proxy is a **central gate for all MCP calls** for every machine/agent — each client talks to the proxy over HTTP with a bearer token, and the proxy fans out to backends on its own host. Best for a team sharing one config. |
+
+In both modes the model sees the same two meta-tools (`get_mcp_tools`, `call_mcp_tool`); only the transport differs.
 
-Create a config file pointing at your MCP servers. See [Configuration](#configuration) for the full shape.
+Start with a config file pointing at your MCP servers. See [Configuration](#configuration) for the full shape.
 
 ```json
 {
   "mcpServers": {
     "github": {
       "url": "https://api.githubcopilot.com/mcp/",
-      "headers": { "Authorization": "Bearer <TOKEN>" },
+      "headers": { "Authorization": "Bearer ${GITHUB_TOKEN}" },
       "instruction": "GitHub: issues, pull requests, code search. Use for anything repo-related."
     },
     "local-tool": {
@@ -61,7 +63,9 @@ Create a config file pointing at your MCP servers. See [Configuration](#configur
 }
 ```
 
-Point your MCP client at it as a stdio server. For example, in an MCP client config:
+### Option A — Stdio (local, default)
+
+Point your MCP client at it as a stdio server. No network server is started and no remote call is made — the proxy runs as a subprocess on the same machine as your client. For example, in an MCP client config:
 
 ```json
 {
@@ -74,9 +78,66 @@ Point your MCP client at it as a stdio server. For example, in an MCP client con
 }
 ```
 
+### Option B — Self-hosted HTTP (shared)
+
+Run the proxy as a shared, long-lived HTTP server (e.g. in Docker) that many clients connect to over the network. No web UI — clients reach the same two meta-tools (`get_mcp_tools`, `call_mcp_tool`) over MCP Streamable HTTP at `POST /mcp`. The proxy becomes the **single central gate**: every MCP call from every user machine/agent flows through it, and it fans out to backends on its own host.
+
+1. Create `.env`** with the shared bearer token and any backend secrets. Start from the example:
+```dotenv
+# shared token every client must send, for auth
+MCP_AUTH_TOKEN=change-me-to-a-long-random-string
+
+# MCP server tokens used by backends in the proxy
+# referenced by mcp.json
+GITHUB_TOKEN=ghp_xxxx                   
+```
+
+> Generate a strong token, e.g. `openssl rand -hex 32`.
+
+2. Define `docker-compose.yml` to build and run the proxy container, exposing `3000`, mounting `mcp.json` read-only, and passing the env vars through:
+
+```yaml
+services:
+  mcp-lazy-proxy:
+    image: sarthakpranesh/mcp-lazy-proxy
+    ports:
+      - "3000:3000"
+    environment:
+      - MCP_AUTH_TOKEN=${MCP_AUTH_TOKEN}
+      - GITHUB_TOKEN=${GITHUB_TOKEN}
+    volumes:
+      - ./mcp.json:/app/mcp.json:ro
+    restart: unless-stopped
+```
+
+3. Start it
+```bash
+docker compose up -d
+```
+
+4. Each machine connects with a single entry in its MCP client config:
+```json
+{
+  "mcpServers": {
+    "lazy-proxy": {
+      "type": "http",
+      "url": "http://<host>:3000/mcp",
+      "headers": { "Authorization": "Bearer <MCP_AUTH_TOKEN>" }
+    }
+  }
+}
+```
+
+Notes:
+- **Local stdio backends now run on the proxy host, not the client.** Backends defined with `command` (plus any local files they need) must exist and be reachable inside the container. Remote (`url`) backends behave the same as in stdio mode.
+- **Auth is mandatory.** In HTTP mode the proxy refuses to start unless `MCP_AUTH_TOKEN` is set. Every request to `/mcp` must carry `Authorization: Bearer <token>` or it is rejected with `401`.
+- **Secrets stay out of the mounted config.** `mcp.json` can reference environment variables with `${VAR}` (e.g. `"Authorization": "Bearer ${GITHUB_TOKEN}"`) and they are substituted from `process.env` at load time.
+- **Config** still comes from `--config` (default `/app/mcp.json`, matching the container mount). The CLI flags are: `--transport http` (stdio is the default), `--port <n>` (default `3000`), `--host <addr>` (default `0.0.0.0`).
+**Rotating the bearer token:** generate a new value, set it in `.env` as `MCP_AUTH_TOKEN`, then `docker compose up -d` to recreate the container. Existing clients must be updated with the new token — old tokens are rejected immediately because each request is checked against the current value.
+
 ## Configuration
 
-The proxy takes a single JSON config file via `--config <path>`. It must have an `mcpServers` object; each entry is a backend with either a `url` (remote) or a `command` (local).
+The proxy takes a single JSON config file via `--config <path>`. It must have an `mcpServers` object; each entry is a backend with either a `url` (remote) or a `command` (local). Any `${VAR}` reference inside the file is substituted from `process.env` at load time, so secrets can live in environment variables instead of the mounted file.
 
 ### Backend reference
 

package/dist/config.js

@@ -19,9 +19,21 @@ export function loadConfig(path) {
     }
     return { mcpServers: servers };
 }
-// read and parse a JSON file into a plain object.
+// substitute ${VAR} references in the config text with values from process.env
+// so secrets can stay out of the mounted file (e.g. ${GITHUB_TOKEN}).
+function substituteEnv(text) {
+    return text.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g, (match, name) => {
+        const value = process.env[name];
+        if (value === undefined) {
+            throw new Error(`environment variable "${name}" referenced in config is not set`);
+        }
+        // raw substitution so it works inside JSON strings, e.g. "Bearer ${TOKEN}"
+        return value;
+    });
+}
+// read, env-substitute, and parse a JSON file into a plain object.
 function readJson(path) {
     const text = readFileSync(path, "utf8");
-    return JSON.parse(text);
+    return JSON.parse(substituteEnv(text));
 }
 //# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AA8BvC,gFAAgF;AAChF,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC;IAC/B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,oCAAoC,CAAC,CAAC;IACvE,CAAC;IACD,iDAAiD;IACjD,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,qBAAqB,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,MAAM,GAAG,OAAQ,GAA2B,CAAC,GAAG,KAAK,QAAQ,CAAC;QACpE,MAAM,UAAU,GAAG,OAAQ,GAA0B,CAAC,OAAO,KAAK,QAAQ,CAAC;QAC3E,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,kCAAkC,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,OAAwC,EAAE,CAAC;AAClE,CAAC;AAED,kDAAkD;AAClD,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AA8BvC,gFAAgF;AAChF,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC;IAC/B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,oCAAoC,CAAC,CAAC;IACvE,CAAC;IACD,iDAAiD;IACjD,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,qBAAqB,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,MAAM,GAAG,OAAQ,GAA2B,CAAC,GAAG,KAAK,QAAQ,CAAC;QACpE,MAAM,UAAU,GAAG,OAAQ,GAA0B,CAAC,OAAO,KAAK,QAAQ,CAAC;QAC3E,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,kCAAkC,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,OAAwC,EAAE,CAAC;AAClE,CAAC;AAED,+EAA+E;AAC/E,sEAAsE;AACtE,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,OAAO,CAAC,iCAAiC,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,mCAAmC,CAAC,CAAC;QACpF,CAAC;QACD,2EAA2E;QAC3E,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,mEAAmE;AACnE,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;AACzC,CAAC"}

package/dist/index.js

@@ -2,145 +2,223 @@
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { CallToolRequestSchema, ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
+import { homedir } from "node:os";
 import { loadConfig } from "./config.js";
 import { BackendManager } from "./backend.js";
+import { startHttpServer } from "./server.js";
 import packageJson from "../package.json" with { type: "json" };
 const CONFIG_ARG = "--config";
-// parse the --config <path> CLI argument.
+const TRANSPORT_ARG = "--transport";
+const PORT_ARG = "--port";
+const HOST_ARG = "--host";
+const DEFAULT_CONFIG_PATH = "/app/mcp.json";
+// expand a leading "~" to the user's home directory, since the proxy may be
+// spawned without a shell (e.g. by an MCP client) where "~" is not expanded.
+function expandHome(p) {
+    if (p === "~")
+        return homedir();
+    if (p.startsWith("~/") || p.startsWith("~\\"))
+        return `${homedir()}${p.slice(1)}`;
+    return p;
+}
+// read a required CLI value following the given flag; throws if missing.
+function readValue(argv, flag) {
+    const idx = argv.indexOf(flag);
+    if (idx === -1)
+        return undefined;
+    const value = argv[idx + 1];
+    if (value === undefined || value.startsWith("--"))
+        return undefined;
+    return value;
+}
+// parse CLI arguments. stdio is the default transport; http is opt-in.
 function parseArgs(argv) {
-    const idx = argv.indexOf(CONFIG_ARG);
-    if (idx === -1 || !argv[idx + 1]) {
-        throw new Error(`usage: mcp-lazy-proxy ${CONFIG_ARG} <path-to-config.json>`);
+    const configPath = expandHome(readValue(argv, CONFIG_ARG) ?? process.env.MCP_CONFIG_PATH ?? DEFAULT_CONFIG_PATH);
+    const transport = (readValue(argv, TRANSPORT_ARG) ?? "stdio");
+    if (transport !== "stdio" && transport !== "http") {
+        throw new Error(`unsupported --transport "${transport}" (expected "stdio" or "http")`);
     }
-    return { configPath: argv[idx + 1] };
+    const port = readValue(argv, PORT_ARG) !== undefined ? Number(readValue(argv, PORT_ARG)) : 3000;
+    const host = readValue(argv, HOST_ARG) ?? "0.0.0.0";
+    return { configPath, transport, port, host };
 }
-// load config and build the backend manager.
-const { configPath } = parseArgs(process.argv.slice(2));
-const config = loadConfig(configPath);
-const backends = new BackendManager(config.mcpServers);
-// eagerly load the tool schemas of any favorite backends so they are injected
-// into context up front (remaining backends stay lazy). also returns a map of
-// each eager tool name to its owning backend so direct calls route correctly.
-const { tools: favoriteTools, owner: favoriteOwner } = await backends.loadFavorites();
-// advertised server instructions: a brief blurb plus the backend catalog.
-const instructions = [
-    "Lazy MCP proxy. Backend MCP servers are not loaded into context by default; discover them on demand.",
-    "Available backends:",
-    ...backends
-        .list()
-        .map((b) => `- ${b.name}: ${b.instruction ?? "no description"}`),
-    "Workflow: call get_mcp_tools to load a backend's tool schemas, then call_mcp_tool to invoke one.",
-].join("\n");
-// create the MCP server with the tools capability flag.
-// capabilities.tools is a capability flag (not the tool list); the two
-// meta-tools are served by the ListToolsRequestSchema handler below.
-const server = new Server({ name: packageJson.name, version: packageJson.version }, { capabilities: { tools: {} }, instructions });
-// advertise the meta-tools plus any eagerly-loaded favorite backend schemas.
-server.setRequestHandler(ListToolsRequestSchema, async () => ({
-    tools: [
-        ...favoriteTools,
-        {
-            name: "get_mcp_tools",
-            description: "Discover the tools exposed by a configured MCP backend. Returns the backend's instruction (if any) plus a filtered list of tool names, descriptions, and input schemas. Call this before call_mcp_tool to learn what a backend can do.",
-            inputSchema: {
-                type: "object",
-                properties: {
-                    mcp: { type: "string", description: "Name of the MCP backend from the proxy config." },
-                    query: { type: "string", description: "Optional substring filter on tool name/description." },
-                    limit: { type: "number", description: "Optional cap on results (default 50)." },
-                },
-                required: ["mcp"],
-            },
-        },
-        {
-            name: "call_mcp_tool",
-            description: "Invoke a tool on a configured MCP backend. Use the tool name and arguments returned by get_mcp_tools.",
-            inputSchema: {
-                type: "object",
-                properties: {
-                    mcp: { type: "string", description: "Name of the MCP backend from the proxy config." },
-                    tool: { type: "string", description: "Tool name as returned by get_mcp_tools." },
-                    arguments: {
+async function main() {
+    // parse CLI, load config, and build the backend manager.
+    const { configPath, transport, port, host } = parseArgs(process.argv.slice(2));
+    const config = loadConfig(configPath);
+    const backends = new BackendManager(config.mcpServers);
+    // eagerly load the tool schemas of any favorite backends so they are injected
+    // into context up front (remaining backends stay lazy). also returns a map of
+    // each eager tool name to its owning backend so direct calls route correctly.
+    const { tools: favoriteTools, owner: favoriteOwner } = await backends.loadFavorites();
+    // shared shutdown: close all backend connections.
+    const shutdown = async () => {
+        await backends.closeAll();
+    };
+    // build a fresh MCP server with the meta-tool handlers wired in.
+    // a new instance is created per HTTP session (one transport per Server).
+    // note: we intentionally use the low-level `Server` (deprecated in the SDK in
+    // favor of `McpServer`) because tool schemas are discovered at runtime and
+    // forwarded by name via call_mcp_tool — the documented advanced use case.
+    const buildServer = () => {
+        const server = new Server({ name: packageJson.name, version: packageJson.version }, {
+            capabilities: { tools: {} },
+            instructions: [
+                "Lazy MCP proxy. Backend MCP servers are not loaded into context by default; discover them on demand.",
+                "Available backends:",
+                ...backends
+                    .list()
+                    .map((b) => `- ${b.name}: ${b.instruction ?? "no description"}`),
+                "Workflow: call get_mcp_tools to load a backend's tool schemas, then call_mcp_tool to invoke one.",
+            ].join("\n"),
+        });
+        // advertise the meta-tools plus any eagerly-loaded favorite backend schemas.
+        server.setRequestHandler(ListToolsRequestSchema, async () => ({
+            tools: [
+                ...favoriteTools,
+                {
+                    name: "get_mcp_tools",
+                    description: "Discover the tools exposed by a configured MCP backend. Returns the backend's instruction (if any) plus a filtered list of tool names, descriptions, and input schemas. Call this before call_mcp_tool to learn what a backend can do.",
+                    inputSchema: {
                         type: "object",
-                        description: "Arguments per the tool's input schema.",
-                        additionalProperties: true,
+                        properties: {
+                            mcp: { type: "string", description: "Name of the MCP backend from the proxy config." },
+                            query: { type: "string", description: "Optional substring filter on tool name/description." },
+                            limit: { type: "number", description: "Optional cap on results (default 50)." },
+                        },
+                        required: ["mcp"],
                     },
                 },
-                required: ["mcp", "tool", "arguments"],
-            },
-        },
-    ],
-}));
-// handle calls to the two meta-tools, dispatching to the right backend.
-server.setRequestHandler(CallToolRequestSchema, async (req) => {
-    const { name, arguments: args } = req.params;
-    try {
-        // get_mcp_tools: load a backend's tool schemas (with optional filter/limit).
-        if (name === "get_mcp_tools") {
-            const mcp = String(args?.mcp ?? "");
-            const query = args?.query ? String(args.query) : undefined;
-            const limit = args?.limit != null ? Number(args.limit) : 50;
-            const handle = await backends.get(mcp);
-            const tools = await handle.listTools(query, limit);
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: JSON.stringify({ mcp, instruction: handle.instruction ?? null, tools }, null, 2),
-                    },
-                ],
-            };
-        }
-        // call_mcp_tool: forward a tool invocation to a backend.
-        if (name === "call_mcp_tool") {
-            const mcp = String(args?.mcp ?? "");
-            const tool = String(args?.tool ?? "");
-            const toolArgs = (args?.arguments ?? {});
-            const handle = await backends.get(mcp);
-            const result = await handle.callTool(tool, toolArgs);
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: typeof result === "string" ? result : JSON.stringify(result, null, 2),
-                    },
-                ],
-            };
-        }
-        // direct call to an injected favorite tool: route to its owning backend.
-        const ownerObj = favoriteOwner.get(name);
-        if (ownerObj) {
-            const handle = await backends.get(ownerObj.backend);
-            const result = await handle.callTool(ownerObj.realToolName, (args ?? {}));
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: typeof result === "string" ? result : JSON.stringify(result, null, 2),
+                {
+                    name: "call_mcp_tool",
+                    description: "Invoke a tool on a configured MCP backend. Use the tool name and arguments returned by get_mcp_tools.",
+                    inputSchema: {
+                        type: "object",
+                        properties: {
+                            mcp: { type: "string", description: "Name of the MCP backend from the proxy config." },
+                            tool: { type: "string", description: "Tool name as returned by get_mcp_tools." },
+                            arguments: {
+                                type: "object",
+                                description: "Arguments per the tool's input schema.",
+                                additionalProperties: true,
+                            },
+                        },
+                        required: ["mcp", "tool", "arguments"],
                     },
-                ],
-            };
+                },
+            ],
+        }));
+        // handle calls to the two meta-tools, dispatching to the right backend.
+        server.setRequestHandler(CallToolRequestSchema, async (req) => {
+            const { name, arguments: args } = req.params;
+            try {
+                // get_mcp_tools: load a backend's tool schemas (with optional filter/limit).
+                if (name === "get_mcp_tools") {
+                    const mcp = String(args?.mcp ?? "");
+                    const query = args?.query ? String(args.query) : undefined;
+                    const limit = args?.limit != null ? Number(args.limit) : 50;
+                    const handle = await backends.get(mcp);
+                    const tools = await handle.listTools(query, limit);
+                    return {
+                        content: [
+                            {
+                                type: "text",
+                                text: JSON.stringify({ mcp, instruction: handle.instruction ?? null, tools }, null, 2),
+                            },
+                        ],
+                    };
+                }
+                // call_mcp_tool: forward a tool invocation to a backend.
+                if (name === "call_mcp_tool") {
+                    const mcp = String(args?.mcp ?? "");
+                    const tool = String(args?.tool ?? "");
+                    const toolArgs = (args?.arguments ?? {});
+                    const handle = await backends.get(mcp);
+                    const result = await handle.callTool(tool, toolArgs);
+                    return {
+                        content: [
+                            {
+                                type: "text",
+                                text: typeof result === "string" ? result : JSON.stringify(result, null, 2),
+                            },
+                        ],
+                    };
+                }
+                // direct call to an injected favorite tool: route to its owning backend.
+                const ownerObj = favoriteOwner.get(name);
+                if (ownerObj) {
+                    const handle = await backends.get(ownerObj.backend);
+                    const result = await handle.callTool(ownerObj.realToolName, (args ?? {}));
+                    return {
+                        content: [
+                            {
+                                type: "text",
+                                text: typeof result === "string" ? result : JSON.stringify(result, null, 2),
+                            },
+                        ],
+                    };
+                }
+                return { content: [{ type: "text", text: `unknown tool: ${name}` }], isError: true };
+            }
+            catch (err) {
+                return {
+                    content: [{ type: "text", text: `error: ${err.message}` }],
+                    isError: true,
+                };
+            }
+        });
+        return server;
+    };
+    // dispatch on the chosen transport.
+    if (transport === "http") {
+        // bearer token auth is required in HTTP mode: fail fast if unset.
+        const token = process.env.MCP_AUTH_TOKEN;
+        if (!token) {
+            throw new Error("MCP_AUTH_TOKEN must be set in HTTP mode to protect the endpoint. Refusing to start unauthenticated.");
         }
-        return { content: [{ type: "text", text: `unknown tool: ${name}` }], isError: true };
-    }
-    catch (err) {
-        return {
-            content: [{ type: "text", text: `error: ${err.message}` }],
-            isError: true,
+        const { getPort, close } = await startHttpServer({
+            host,
+            port,
+            buildServer,
+            expectedToken: token,
+            onShutdown: shutdown,
+        });
+        const summary = {
+            transport: "http",
+            port: getPort(),
+            backends: backends.list().length,
+            favorites: backends.favorites().length,
         };
+        console.log(`[mcp-lazy-proxy] ${JSON.stringify(summary, null, 2)}`);
+        process.on("SIGINT", async () => {
+            await close();
+            process.exit(0);
+        });
+        process.on("SIGTERM", async () => {
+            await close();
+            process.exit(0);
+        });
+        return;
     }
-});
-// connect over stdio and clean up backends on shutdown.
-const transport = new StdioServerTransport();
-await server.connect(transport);
-// clean up backends on shutdown.
-process.on("SIGINT", async () => {
-    await backends.closeAll();
-    process.exit(0);
-});
-// clean up backends on termination.
-process.on("SIGTERM", async () => {
-    await backends.closeAll();
-    process.exit(0);
-});
+    // stdio mode: connect over stdio and clean up backends on shutdown.
+    const server = buildServer();
+    const transportStream = new StdioServerTransport();
+    await server.connect(transportStream);
+    const summary = {
+        transport: "stdio",
+        backends: backends.list().length,
+        favorites: backends.favorites().length,
+    };
+    console.error(`[mcp-lazy-proxy] ${JSON.stringify(summary, null, 2)}`);
+    process.on("SIGINT", async () => {
+        await shutdown();
+        process.exit(0);
+    });
+    process.on("SIGTERM", async () => {
+        await shutdown();
+        process.exit(0);
+    });
+    return undefined;
+}
+await main();
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AACnG,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,WAAW,MAAM,iBAAiB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAEhE,MAAM,UAAU,GAAG,UAAU,CAAC;AAE9B,0CAA0C;AAC1C,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,yBAAyB,UAAU,wBAAwB,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;AACvC,CAAC;AAED,6CAA6C;AAC7C,MAAM,EAAE,UAAU,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACxD,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;AACtC,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AAEvD,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,QAAQ,CAAC,aAAa,EAAE,CAAC;AAEtF,0EAA0E;AAC1E,MAAM,YAAY,GAAG;IACnB,sGAAsG;IACtG,qBAAqB;IACrB,GAAG,QAAQ;SACR,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,IAAI,gBAAgB,EAAE,CAAC;IAClE,kGAAkG;CACnG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,wDAAwD;AACxD,uEAAuE;AACvE,qEAAqE;AACrE,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,EACxD,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,CAC9C,CAAC;AAEF,6EAA6E;AAC7E,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAC5D,KAAK,EAAE;QACL,GAAG,aAAa;QAChB;YACE,IAAI,EAAE,eAAe;YACrB,WAAW,EACT,wOAAwO;YAC1O,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gDAAgD,EAAE;oBACtF,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qDAAqD,EAAE;oBAC7F,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uCAAuC,EAAE;iBAChF;gBACD,QAAQ,EAAE,CAAC,KAAK,CAAC;aAClB;SACF;QACD;YACE,IAAI,EAAE,eAAe;YACrB,WAAW,EACT,uGAAuG;YACzG,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gDAAgD,EAAE;oBACtF,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,yCAAyC,EAAE;oBAChF,SAAS,EAAE;wBACT,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,wCAAwC;wBACrD,oBAAoB,EAAE,IAAI;qBAC3B;iBACF;gBACD,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC;aACvC;SACF;KACF;CACF,CAAC,CAAC,CAAC;AAEJ,wEAAwE;AACxE,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;IAC5D,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAC7C,IAAI,CAAC;QACH,6EAA6E;QAC7E,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;YACpC,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3D,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACnD,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI,EAAE,KAAK,EAAE,EACvD,IAAI,EACJ,CAAC,CACF;qBACF;iBACF;aACF,CAAC;QACJ,CAAC;QAED,yDAAyD;QACzD,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;YACpC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YACtC,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAA4B,CAAC;YACpE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACrD,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;qBAC5E;iBACF;aACF,CAAC;QACJ,CAAC;QAED,yEAAyE;QACzE,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC,CAAC;YACrG,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;qBAC5E;iBACF;aACF,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACvF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAW,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;YACrE,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,wDAAwD;AACxD,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAEhC,iCAAiC;AACjC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;IAC9B,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAC1B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,oCAAoC;AACpC,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;IAC/B,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAC1B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AACnG,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,WAAW,MAAM,iBAAiB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAEhE,MAAM,UAAU,GAAG,UAAU,CAAC;AAC9B,MAAM,aAAa,GAAG,aAAa,CAAC;AACpC,MAAM,QAAQ,GAAG,QAAQ,CAAC;AAC1B,MAAM,QAAQ,GAAG,QAAQ,CAAC;AAC1B,MAAM,mBAAmB,GAAG,eAAe,CAAC;AAE5C,4EAA4E;AAC5E,6EAA6E;AAC7E,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,OAAO,EAAE,CAAC;IAChC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,OAAO,CAAC,CAAC;AACX,CAAC;AAUD,yEAAyE;AACzE,SAAS,SAAS,CAAC,IAAc,EAAE,IAAY;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACpE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uEAAuE;AACvE,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,UAAU,GACd,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,mBAAmB,CAAC,CAAC;IAChG,MAAM,SAAS,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,OAAO,CAAyB,CAAC;IACtF,IAAI,SAAS,KAAK,OAAO,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,4BAA4B,SAAS,gCAAgC,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChG,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,SAAS,CAAC;IACpD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC/C,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,yDAAyD;IACzD,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAEvD,8EAA8E;IAC9E,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,QAAQ,CAAC,aAAa,EAAE,CAAC;IAEtF,kDAAkD;IAClD,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC,CAAC;IAEF,iEAAiE;IACjE,yEAAyE;IACzE,8EAA8E;IAC9E,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,WAAW,GAAG,GAAG,EAAE;QACvB,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,EACxD;YACE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YAC3B,YAAY,EAAE;gBACZ,sGAAsG;gBACtG,qBAAqB;gBACrB,GAAG,QAAQ;qBACR,IAAI,EAAE;qBACN,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,IAAI,gBAAgB,EAAE,CAAC;gBAClE,kGAAkG;aACnG,CAAC,IAAI,CAAC,IAAI,CAAC;SACb,CACF,CAAC;QAEF,6EAA6E;QAC7E,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YAC5D,KAAK,EAAE;gBACL,GAAG,aAAa;gBAChB;oBACE,IAAI,EAAE,eAAe;oBACrB,WAAW,EACT,wOAAwO;oBAC1O,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gDAAgD,EAAE;4BACtF,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qDAAqD,EAAE;4BAC7F,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uCAAuC,EAAE;yBAChF;wBACD,QAAQ,EAAE,CAAC,KAAK,CAAC;qBAClB;iBACF;gBACD;oBACE,IAAI,EAAE,eAAe;oBACrB,WAAW,EACT,uGAAuG;oBACzG,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gDAAgD,EAAE;4BACtF,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,yCAAyC,EAAE;4BAChF,SAAS,EAAE;gCACT,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,wCAAwC;gCACrD,oBAAoB,EAAE,IAAI;6BAC3B;yBACF;wBACD,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC;qBACvC;iBACF;aACF;SACF,CAAC,CAAC,CAAC;QAEJ,wEAAwE;QACxE,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC9D,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;YAC7C,IAAI,CAAC;gBACH,6EAA6E;gBAC7E,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;oBAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;oBACpC,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC3D,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACvC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;oBACnD,OAAO;wBACL,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAM;gCACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI,EAAE,KAAK,EAAE,EACvD,IAAI,EACJ,CAAC,CACF;6BACF;yBACF;qBACF,CAAC;gBACJ,CAAC;gBAED,yDAAyD;gBACzD,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;oBAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;oBACpC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;oBACtC,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAA4B,CAAC;oBACpE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACvC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;oBACrD,OAAO;wBACL,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAM;gCACZ,IAAI,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;6BAC5E;yBACF;qBACF,CAAC;gBACJ,CAAC;gBAED,yEAAyE;gBACzE,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACzC,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;oBACpD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC,CAAC;oBACrG,OAAO;wBACL,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAM;gCACZ,IAAI,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;6BAC5E;yBACF;qBACF,CAAC;gBACJ,CAAC;gBAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACvF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAW,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;oBACrE,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,oCAAoC;IACpC,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACzB,kEAAkE;QAClE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,qGAAqG,CACtG,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,eAAe,CAAC;YAC/C,IAAI;YACJ,IAAI;YACJ,WAAW;YACX,aAAa,EAAE,KAAK;YACpB,UAAU,EAAE,QAAQ;SACrB,CAAC,CAAC;QACH,MAAM,OAAO,GAAG;YACd,SAAS,EAAE,MAAM;YACjB,IAAI,EAAE,OAAO,EAAE;YACf,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM;YAChC,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,MAAM;SACvC,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAEpE,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;YAC9B,MAAM,KAAK,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;YAC/B,MAAM,KAAK,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,oEAAoE;IACpE,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,MAAM,eAAe,GAAG,IAAI,oBAAoB,EAAE,CAAC;IACnD,MAAM,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG;QACd,SAAS,EAAE,OAAO;QAClB,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM;QAChC,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,MAAM;KACvC,CAAC;IACF,OAAO,CAAC,KAAK,CAAC,oBAAoB,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAEtE,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;QAC9B,MAAM,QAAQ,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAC/B,MAAM,QAAQ,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,IAAI,EAAE,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,19 @@
+import { Server as NodeHttpServer } from "node:http";
+import type { Server as McpServer } from "@modelcontextprotocol/sdk/server/index.js";
+export interface HttpServerOptions {
+    host: string;
+    port: number;
+    /** builds a fresh MCP Server for each client session (one transport per Server). */
+    buildServer: () => McpServer;
+    /** expected bearer token; when provided, requests without it return 401. */
+    expectedToken?: string;
+    /** how long a session may sit idle before it is closed and evicted (ms). 0 disables. */
+    sessionIdleTimeoutMs?: number;
+    /** called on graceful shutdown to close backends. */
+    onShutdown?: () => Promise<void>;
+}
+export declare function startHttpServer(opts: HttpServerOptions): Promise<{
+    server: NodeHttpServer;
+    getPort: () => number;
+    close: () => Promise<void>;
+}>;

package/dist/server.js

@@ -0,0 +1,109 @@
+import { createServer as createNodeHttpServer } from "node:http";
+import { randomUUID, timingSafeEqual } from "node:crypto";
+import { StreamableHTTPServerTransport, } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+// timing-safe token comparison. uses a length check first because
+// crypto.timingSafeEqual throws on buffers of differing lengths, then delegates
+// to the native constant-time comparison.
+function safeEqual(a, b) {
+    if (a.length !== b.length)
+        return false;
+    return timingSafeEqual(Buffer.from(a, "utf8"), Buffer.from(b, "utf8"));
+}
+// parse the "Authorization: Bearer <token>" header; returns the bearer token
+// or undefined if the header is missing/unparseable.
+function bearerToken(authHeader) {
+    if (!authHeader)
+        return undefined;
+    const m = /^Bearer\s+(.+)$/i.exec(authHeader.trim());
+    return m ? m[1] : undefined;
+}
+// start a Streamable HTTP MCP server on a single endpoint (POST /mcp).
+// clients get their own Server+transport per streamable session, so the proxy
+// can serve many concurrent clients while reusing the shared backend manager.
+export async function startHttpServer(opts) {
+    const { buildServer, expectedToken, onShutdown } = opts;
+    const sessionIdleTimeoutMs = opts.sessionIdleTimeoutMs ?? 5 * 60_000;
+    const sessions = new Map();
+    // evict and close a single session, removing it from the map and stopping
+    // its transport so the underlying SSE stream is torn down.
+    const evictSession = async (sid) => {
+        const entry = sessions.get(sid);
+        if (!entry)
+            return;
+        sessions.delete(sid);
+        await entry.transport.close().catch(() => { });
+        await entry.server.close().catch(() => { });
+    };
+    const nodeServer = createNodeHttpServer(async (req, res) => {
+        // health probe: always allowed, no auth, so container HEALTHCHECK can probe.
+        if (req.method === "GET" && req.url === "/health") {
+            res.writeHead(200, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ ok: true }));
+            return;
+        }
+        // auth gate: reject anything except a valid bearer token when one is set.
+        if (expectedToken) {
+            const token = bearerToken(req.headers.authorization);
+            if (!token || !safeEqual(token, expectedToken)) {
+                res.writeHead(401, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({ error: "unauthorized" }));
+                return;
+            }
+        }
+        // path gate: the MCP endpoint is POST /mcp; everything else is not found.
+        if (req.method === "POST" && req.url === "/mcp") {
+            const sessionId = req.headers["mcp-session-id"];
+            // resume an existing session via its transport
+            if (sessionId && sessions.has(sessionId)) {
+                const entry = sessions.get(sessionId);
+                entry.lastActivity = Date.now();
+                await entry.transport.handleRequest(req, res);
+                return;
+            }
+            // new streamable session: create a fresh Server + transport
+            const transport = new StreamableHTTPServerTransport({ sessionIdGenerator: () => randomUUID() });
+            const sessionServer = buildServer();
+            await sessionServer.connect(transport);
+            // handleRequest populates transport.sessionId for a brand-new session;
+            // register it afterwards so subsequent requests can be routed back.
+            await transport.handleRequest(req, res);
+            if (transport.sessionId) {
+                const sid = transport.sessionId;
+                sessions.set(sid, { server: sessionServer, transport, lastActivity: Date.now() });
+                transport.onclose = () => {
+                    sessions.delete(sid);
+                    void sessionServer.close();
+                };
+                transport.onerror = (err) => console.error("[http-proxy] transport error:", err);
+            }
+            return;
+        }
+        res.writeHead(404, { "Content-Type": "application/json" });
+        res.end(JSON.stringify({ error: "not found" }));
+    });
+    await new Promise((resolve) => nodeServer.listen(opts.port, opts.host, resolve));
+    const { port } = nodeServer.address();
+    // periodic sweep: close and evict sessions that have been idle too long, so
+    // abandoned clients don't accumulate connections/memory on the proxy.
+    const idleTimer = sessionIdleTimeoutMs > 0
+        ? setInterval(() => {
+            const cutoff = Date.now() - sessionIdleTimeoutMs;
+            for (const [sid, entry] of sessions) {
+                if (entry.lastActivity < cutoff)
+                    void evictSession(sid);
+            }
+        }, Math.min(sessionIdleTimeoutMs, 30_000)).unref?.() ?? undefined
+        : undefined;
+    return {
+        server: nodeServer,
+        getPort: () => port,
+        close: async () => {
+            if (idleTimer)
+                clearInterval(idleTimer);
+            await Promise.all([...sessions.keys()].map((sid) => evictSession(sid)));
+            await onShutdown?.();
+            await new Promise((resolve, reject) => nodeServer.close((err) => (err ? reject(err) : resolve())));
+        },
+    };
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,IAAI,oBAAoB,EAA4B,MAAM,WAAW,CAAC;AAC3F,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EACL,6BAA6B,GAC9B,MAAM,oDAAoD,CAAC;AAG5D,kEAAkE;AAClE,gFAAgF;AAChF,0CAA0C;AAC1C,SAAS,SAAS,CAAC,CAAS,EAAE,CAAS;IACrC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,6EAA6E;AAC7E,qDAAqD;AACrD,SAAS,WAAW,CAAC,UAA8B;IACjD,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9B,CAAC;AAeD,uEAAuE;AACvE,8EAA8E;AAC9E,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAuB;IAK3D,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IACxD,MAAM,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,IAAI,CAAC,GAAG,MAAM,CAAC;IAMrE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAE5C,0EAA0E;IAC1E,2DAA2D;IAC3D,MAAM,YAAY,GAAG,KAAK,EAAE,GAAW,EAAE,EAAE;QACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrB,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC9C,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,oBAAoB,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACzD,6EAA6E;QAC7E,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAClD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QAED,0EAA0E;QAC1E,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YACrD,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,CAAC;gBAC/C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC;YAChD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;YAEtE,+CAA+C;YAC/C,IAAI,SAAS,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC;gBACvC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAChC,MAAM,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,4DAA4D;YAC5D,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAChG,MAAM,aAAa,GAAG,WAAW,EAAE,CAAC;YACpC,MAAM,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAEvC,uEAAuE;YACvE,oEAAoE;YACpE,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACxC,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;gBACxB,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC;gBAChC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAClF,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;oBACvB,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBACrB,KAAK,aAAa,CAAC,KAAK,EAAE,CAAC;gBAC7B,CAAC,CAAC;gBACF,SAAS,CAAC,OAAO,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,GAAG,CAAC,CAAC;YACnF,CAAC;YACD,OAAO;QACT,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAEvF,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,OAAO,EAAsB,CAAC;IAE1D,4EAA4E;IAC5E,sEAAsE;IACtE,MAAM,SAAS,GACb,oBAAoB,GAAG,CAAC;QACtB,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE;YACf,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,oBAAoB,CAAC;YACjD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACpC,IAAI,KAAK,CAAC,YAAY,GAAG,MAAM;oBAAE,KAAK,YAAY,CAAC,GAAG,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,SAAS;QACnE,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO;QACL,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI;QACnB,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,IAAI,SAAS;gBAAE,aAAa,CAAC,SAAS,CAAC,CAAC;YACxC,MAAM,OAAO,CAAC,GAAG,CACf,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CACrD,CAAC;YACF,MAAM,UAAU,EAAE,EAAE,CAAC;YACrB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAC1C,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAC3D,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sarthakpranesh/mcp-lazy-proxy",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "Lazy MCP proxy: exposes get_mcp_tools / call_mcp_tool meta-tools that load backend MCP servers on demand, so only two tool schemas are injected into the model context.",
   "type": "module",
   "bin": {