@shipit-ai/cli 1.173.1 → 1.174.0

package/dist/packages/core/src/application/ports/output/services/mcp-server-browser.interface.d.ts

@@ -33,6 +33,14 @@ export interface McpToolInfo {
 }
 export interface IMcpServerBrowserService {
     fetchServers(proxyBaseUrl: string, apiKey?: string): Promise<McpServerInfo[]>;
-    fetchTools(proxyBaseUrl: string, apiKey?: string): Promise<McpToolInfo[]>;
+    /**
+     * Fetch tools for a specific MCP server via JSON-RPC.
+     *
+     * LiteLLM exposes each MCP server at `{proxyBaseUrl}/{serverName}/mcp` and
+     * accepts standard MCP JSON-RPC requests. This method POSTs a
+     * `{"jsonrpc":"2.0","id":1,"method":"tools/list"}` body and parses the
+     * `result.tools` array from the response.
+     */
+    fetchTools(proxyBaseUrl: string, serverName: string, apiKey?: string): Promise<McpToolInfo[]>;
 }
 //# sourceMappingURL=mcp-server-browser.interface.d.ts.map

package/dist/packages/core/src/application/ports/output/services/mcp-server-browser.interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-server-browser.interface.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/application/ports/output/services/mcp-server-browser.interface.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,wBAAwB;IACvC,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IAC9E,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;CAC3E"}
+{"version":3,"file":"mcp-server-browser.interface.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/application/ports/output/services/mcp-server-browser.interface.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,wBAAwB;IACvC,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IAC9E;;;;;;;OAOG;IACH,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;CAC/F"}

package/dist/packages/core/src/application/use-cases/mcp-servers/fetch-mcp-server-tools.use-case.d.ts

@@ -1,16 +1,20 @@
 /**
  * Fetch MCP Server Tools Use Case
  *
- * Retrieves the list of MCP tools from the configured LiteLLM proxy's
- * REST tools/list endpoint.
+ * Retrieves the list of MCP tools for a specific server from the configured
+ * LiteLLM proxy via JSON-RPC (POST {proxyUrl}/{serverName}/mcp).
  *
  * Business Rules:
  * - Reads proxy URL from settings via ISettingsReader
  * - If proxy not configured, returns empty array
+ * - Requires a server name to target a specific MCP server
  * - Delegates to IMcpServerBrowserService for HTTP retrieval
  */
 import type { ISettingsReader } from '../../ports/output/services/settings-reader.interface.js';
 import type { IMcpServerBrowserService, McpToolInfo } from '../../ports/output/services/mcp-server-browser.interface.js';
+export interface FetchMcpServerToolsInput {
+    serverName: string;
+}
 export interface FetchMcpServerToolsResult {
     tools: McpToolInfo[];
 }
@@ -18,6 +22,6 @@ export declare class FetchMcpServerToolsUseCase {
     private readonly settingsReader;
     private readonly browserService;
     constructor(settingsReader: ISettingsReader, browserService: IMcpServerBrowserService);
-    execute(): Promise<FetchMcpServerToolsResult>;
+    execute(input: FetchMcpServerToolsInput): Promise<FetchMcpServerToolsResult>;
 }
 //# sourceMappingURL=fetch-mcp-server-tools.use-case.d.ts.map

package/dist/packages/core/src/application/use-cases/mcp-servers/fetch-mcp-server-tools.use-case.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fetch-mcp-server-tools.use-case.d.ts","sourceRoot":"","sources":["../../../../../../../packages/core/src/application/use-cases/mcp-servers/fetch-mcp-server-tools.use-case.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0DAA0D,CAAC;AAChG,OAAO,KAAK,EACV,wBAAwB,EACxB,WAAW,EACZ,MAAM,6DAA6D,CAAC;AAErE,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,WAAW,EAAE,CAAC;CACtB;AAED,qBACa,0BAA0B;IAGnC,OAAO,CAAC,QAAQ,CAAC,cAAc;IAE/B,OAAO,CAAC,QAAQ,CAAC,cAAc;gBAFd,cAAc,EAAE,eAAe,EAE/B,cAAc,EAAE,wBAAwB;IAGrD,OAAO,IAAI,OAAO,CAAC,yBAAyB,CAAC;CAapD"}
+{"version":3,"file":"fetch-mcp-server-tools.use-case.d.ts","sourceRoot":"","sources":["../../../../../../../packages/core/src/application/use-cases/mcp-servers/fetch-mcp-server-tools.use-case.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0DAA0D,CAAC;AAChG,OAAO,KAAK,EACV,wBAAwB,EACxB,WAAW,EACZ,MAAM,6DAA6D,CAAC;AAErE,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,WAAW,EAAE,CAAC;CACtB;AAED,qBACa,0BAA0B;IAGnC,OAAO,CAAC,QAAQ,CAAC,cAAc;IAE/B,OAAO,CAAC,QAAQ,CAAC,cAAc;gBAFd,cAAc,EAAE,eAAe,EAE/B,cAAc,EAAE,wBAAwB;IAGrD,OAAO,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC;CAanF"}

package/dist/packages/core/src/application/use-cases/mcp-servers/fetch-mcp-server-tools.use-case.js

@@ -1,12 +1,13 @@
 /**
  * Fetch MCP Server Tools Use Case
  *
- * Retrieves the list of MCP tools from the configured LiteLLM proxy's
- * REST tools/list endpoint.
+ * Retrieves the list of MCP tools for a specific server from the configured
+ * LiteLLM proxy via JSON-RPC (POST {proxyUrl}/{serverName}/mcp).
  *
  * Business Rules:
  * - Reads proxy URL from settings via ISettingsReader
  * - If proxy not configured, returns empty array
+ * - Requires a server name to target a specific MCP server
  * - Delegates to IMcpServerBrowserService for HTTP retrieval
  */
 var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
@@ -29,14 +30,14 @@ let FetchMcpServerToolsUseCase = class FetchMcpServerToolsUseCase {
         this.settingsReader = settingsReader;
         this.browserService = browserService;
     }
-    async execute() {
+    async execute(input) {
         const settings = this.settingsReader.getSettings();
         const proxyUrl = settings?.litellmProxy?.baseUrl;
-        if (!proxyUrl) {
+        if (!proxyUrl || !input.serverName) {
             return { tools: [] };
         }
         const apiKey = settings.litellmProxy?.apiKey;
-        const tools = await this.browserService.fetchTools(proxyUrl, apiKey);
+        const tools = await this.browserService.fetchTools(proxyUrl, input.serverName, apiKey);
         return { tools };
     }
 };

package/dist/packages/core/src/infrastructure/di/modules/web-tokens.module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"web-tokens.module.d.ts","sourceRoot":"","sources":["../../../../../../../packages/core/src/infrastructure/di/modules/web-tokens.module.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAmEpD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,mBAAmB,GAAG,IAAI,CA2I5E"}
+{"version":3,"file":"web-tokens.module.d.ts","sourceRoot":"","sources":["../../../../../../../packages/core/src/infrastructure/di/modules/web-tokens.module.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAoEpD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,mBAAmB,GAAG,IAAI,CA8I5E"}

package/dist/packages/core/src/infrastructure/di/modules/web-tokens.module.js

@@ -20,6 +20,7 @@ import { AutoResolveMergedBranchesUseCase } from '../../../application/use-cases
 // Agent use cases
 import { ApproveAgentRunUseCase } from '../../../application/use-cases/agents/approve-agent-run.use-case.js';
 import { RejectAgentRunUseCase } from '../../../application/use-cases/agents/reject-agent-run.use-case.js';
+import { StopAgentRunUseCase } from '../../../application/use-cases/agents/stop-agent-run.use-case.js';
 import { PollAgentEventsUseCase } from '../../../application/use-cases/agents/poll-agent-events.use-case.js';
 // Tool use cases
 import { InstallToolUseCase } from '../../../application/use-cases/tools/install-tool.use-case.js';
@@ -115,6 +116,9 @@ export function registerWebTokensModule(container) {
     container.register('RejectAgentRunUseCase', {
         useFactory: (c) => c.resolve(RejectAgentRunUseCase),
     });
+    container.register('StopAgentRunUseCase', {
+        useFactory: (c) => c.resolve(StopAgentRunUseCase),
+    });
     container.register('PollAgentEventsUseCase', {
         useFactory: (c) => c.resolve(PollAgentEventsUseCase),
     });

package/dist/packages/core/src/infrastructure/services/mcp-server-browser/mcp-server-browser.schema.d.ts

@@ -45,6 +45,18 @@ declare const McpToolInfoSchema: z.ZodObject<{
     description: z.ZodPipe<z.ZodDefault<z.ZodString>, z.ZodTransform<string, string>>;
     inputSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, z.core.$strip>;
+export declare const McpJsonRpcToolsListResponseSchema: z.ZodObject<{
+    jsonrpc: z.ZodOptional<z.ZodString>;
+    id: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+    result: z.ZodObject<{
+        tools: z.ZodArray<z.ZodObject<{
+            name: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+            title: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+            description: z.ZodPipe<z.ZodDefault<z.ZodString>, z.ZodTransform<string, string>>;
+            inputSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
 export declare const McpToolListResponseSchema: z.ZodObject<{
     tools: z.ZodArray<z.ZodObject<{
         name: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;

package/dist/packages/core/src/infrastructure/services/mcp-server-browser/mcp-server-browser.schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-server-browser.schema.d.ts","sourceRoot":"","sources":["../../../../../../../packages/core/src/infrastructure/services/mcp-server-browser/mcp-server-browser.schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAaxB,QAAA,MAAM,mBAAmB;;;;;;;;;;;;;;iBAavB,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;kBAA+B,CAAC;AAEhE,QAAA,MAAM,iBAAiB;;;;;iBAWrB,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;iBAEpC,CAAC;AAGH,eAAO,MAAM,yBAAyB;;;;;kBAA6B,CAAC;AAEpE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AACzE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC"}
+{"version":3,"file":"mcp-server-browser.schema.d.ts","sourceRoot":"","sources":["../../../../../../../packages/core/src/infrastructure/services/mcp-server-browser/mcp-server-browser.schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAaxB,QAAA,MAAM,mBAAmB;;;;;;;;;;;;;;iBAavB,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;kBAA+B,CAAC;AAEhE,QAAA,MAAM,iBAAiB;;;;;iBAWrB,CAAC;AAIH,eAAO,MAAM,iCAAiC;;;;;;;;;;;iBAM5C,CAAC;AAGH,eAAO,MAAM,yBAAyB;;;;;;;iBAEpC,CAAC;AAGH,eAAO,MAAM,yBAAyB;;;;;kBAA6B,CAAC;AAEpE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AACzE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC"}

package/dist/packages/core/src/infrastructure/services/mcp-server-browser/mcp-server-browser.schema.js

@@ -46,8 +46,18 @@ const McpToolInfoSchema = z.object({
         .transform((s) => s.slice(0, 2000)),
     inputSchema: z.record(z.string(), z.unknown()).optional(),
 });
+// MCP JSON-RPC response for tools/list:
+// { "jsonrpc": "2.0", "id": 1, "result": { "tools": [...] } }
+export const McpJsonRpcToolsListResponseSchema = z.object({
+    jsonrpc: z.string().optional(),
+    id: z.union([z.string(), z.number()]).optional(),
+    result: z.object({
+        tools: z.array(McpToolInfoSchema),
+    }),
+});
+// Some older LiteLLM versions / compat modes may return the wrapped result directly
 export const McpToolListResponseSchema = z.object({
     tools: z.array(McpToolInfoSchema),
 });
-// Fallback: tools/list may return a bare array in some LiteLLM versions
+// Bare array fallback
 export const McpToolListFallbackSchema = z.array(McpToolInfoSchema);

package/dist/packages/core/src/infrastructure/services/mcp-server-browser/mcp-server-browser.service.d.ts

@@ -4,14 +4,22 @@
  * Implements IMcpServerBrowserService using Node 22+ native fetch for
  * read-only HTTP retrieval from LiteLLM proxy endpoints:
  * - GET /public/mcp_hub — list accessible MCP servers
- * - GET /mcp-rest/tools/list — list available MCP tools
+ * - POST /{serverName}/mcp — list tools for a specific server via JSON-RPC
  *
  * Pattern: AbortController timeout, redirect rejection, size limit, Zod validation.
  * Silent failure to empty arrays on any error.
+ *
+ * LiteLLM's MCP tool listing is per-server via JSON-RPC, not a global REST
+ * endpoint. See https://docs.litellm.ai/docs/mcp for the canonical API shape:
+ *
+ *   POST {proxyBaseUrl}/{serverName}/mcp
+ *   Content-Type: application/json
+ *   x-litellm-api-key: Bearer {apiKey}
+ *   {"jsonrpc": "2.0", "id": 1, "method": "tools/list"}
  */
 import type { IMcpServerBrowserService, McpServerInfo, McpToolInfo } from '../../../application/ports/output/services/mcp-server-browser.interface.js';
 export declare class McpServerBrowserService implements IMcpServerBrowserService {
     fetchServers(proxyBaseUrl: string, apiKey?: string): Promise<McpServerInfo[]>;
-    fetchTools(proxyBaseUrl: string, apiKey?: string): Promise<McpToolInfo[]>;
+    fetchTools(proxyBaseUrl: string, serverName: string, apiKey?: string): Promise<McpToolInfo[]>;
 }
 //# sourceMappingURL=mcp-server-browser.service.d.ts.map

package/dist/packages/core/src/infrastructure/services/mcp-server-browser/mcp-server-browser.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-server-browser.service.d.ts","sourceRoot":"","sources":["../../../../../../../packages/core/src/infrastructure/services/mcp-server-browser/mcp-server-browser.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EACV,wBAAwB,EACxB,aAAa,EACb,WAAW,EACZ,MAAM,4EAA4E,CAAC;AAUpF,qBACa,uBAAwB,YAAW,wBAAwB;IAChE,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAoB7E,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;CAwBhF"}
+{"version":3,"file":"mcp-server-browser.service.d.ts","sourceRoot":"","sources":["../../../../../../../packages/core/src/infrastructure/services/mcp-server-browser/mcp-server-browser.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,KAAK,EACV,wBAAwB,EACxB,aAAa,EACb,WAAW,EACZ,MAAM,4EAA4E,CAAC;AAYpF,qBACa,uBAAwB,YAAW,wBAAwB;IAChE,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAoB7E,UAAU,CACd,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,WAAW,EAAE,CAAC;CAqC1B"}

package/dist/packages/core/src/infrastructure/services/mcp-server-browser/mcp-server-browser.service.js

@@ -4,10 +4,18 @@
  * Implements IMcpServerBrowserService using Node 22+ native fetch for
  * read-only HTTP retrieval from LiteLLM proxy endpoints:
  * - GET /public/mcp_hub — list accessible MCP servers
- * - GET /mcp-rest/tools/list — list available MCP tools
+ * - POST /{serverName}/mcp — list tools for a specific server via JSON-RPC
  *
  * Pattern: AbortController timeout, redirect rejection, size limit, Zod validation.
  * Silent failure to empty arrays on any error.
+ *
+ * LiteLLM's MCP tool listing is per-server via JSON-RPC, not a global REST
+ * endpoint. See https://docs.litellm.ai/docs/mcp for the canonical API shape:
+ *
+ *   POST {proxyBaseUrl}/{serverName}/mcp
+ *   Content-Type: application/json
+ *   x-litellm-api-key: Bearer {apiKey}
+ *   {"jsonrpc": "2.0", "id": 1, "method": "tools/list"}
  */
 var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -16,9 +24,10 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
 import { injectable } from 'tsyringe';
-import { McpServerListSchema, McpToolListResponseSchema, McpToolListFallbackSchema, } from './mcp-server-browser.schema.js';
+import { McpServerListSchema, McpJsonRpcToolsListResponseSchema, McpToolListResponseSchema, McpToolListFallbackSchema, } from './mcp-server-browser.schema.js';
 const FETCH_TIMEOUT_MS = 10_000;
 const MAX_RESPONSE_SIZE = 5_000_000;
+const SAFE_SERVER_NAME_REGEX = /^[a-zA-Z0-9_-]{1,100}$/;
 let McpServerBrowserService = class McpServerBrowserService {
     async fetchServers(proxyBaseUrl, apiKey) {
         try {
@@ -26,8 +35,8 @@ let McpServerBrowserService = class McpServerBrowserService {
             if (!url)
                 return [];
             const endpoint = `${url}/public/mcp_hub`;
-            const headers = buildHeaders(apiKey);
-            const json = await fetchJson(endpoint, headers);
+            const headers = buildGetHeaders(apiKey);
+            const json = await fetchJson(endpoint, { method: 'GET', headers });
             if (json === null)
                 return [];
             const parsed = McpServerListSchema.safeParse(json);
@@ -39,21 +48,34 @@ let McpServerBrowserService = class McpServerBrowserService {
             return [];
         }
     }
-    async fetchTools(proxyBaseUrl, apiKey) {
+    async fetchTools(proxyBaseUrl, serverName, apiKey) {
         try {
             const url = parseAndValidateUrl(proxyBaseUrl);
             if (!url)
                 return [];
-            const endpoint = `${url}/mcp-rest/tools/list`;
-            const headers = buildHeaders(apiKey);
-            const json = await fetchJson(endpoint, headers);
+            // Validate server name against an allowlist regex before URL interpolation
+            // to prevent path traversal / injection into the request URL.
+            if (!SAFE_SERVER_NAME_REGEX.test(serverName))
+                return [];
+            const endpoint = `${url}/${serverName}/mcp`;
+            const headers = buildPostHeaders(apiKey);
+            const body = JSON.stringify({
+                jsonrpc: '2.0',
+                id: 1,
+                method: 'tools/list',
+            });
+            const json = await fetchJson(endpoint, { method: 'POST', headers, body });
             if (json === null)
                 return [];
-            // Try wrapped format first: { tools: [...] }
+            // Primary format: JSON-RPC 2.0 response { jsonrpc, id, result: { tools: [...] } }
+            const rpcParsed = McpJsonRpcToolsListResponseSchema.safeParse(json);
+            if (rpcParsed.success)
+                return rpcParsed.data.result.tools;
+            // Fallback: some versions may return { tools: [...] } directly
             const wrapped = McpToolListResponseSchema.safeParse(json);
             if (wrapped.success)
                 return wrapped.data.tools;
-            // Fallback: bare array [...]
+            // Fallback: bare array
             const bare = McpToolListFallbackSchema.safeParse(json);
             if (bare.success)
                 return bare.data;
@@ -79,35 +101,95 @@ function parseAndValidateUrl(proxyBaseUrl) {
         return null;
     }
 }
-function buildHeaders(apiKey) {
+function buildGetHeaders(apiKey) {
     const headers = {};
     if (apiKey) {
         headers['Authorization'] = `Bearer ${apiKey}`;
     }
     return headers;
 }
-async function fetchJson(endpoint, headers) {
+function buildPostHeaders(apiKey) {
+    // LiteLLM's MCP JSON-RPC endpoint expects `x-litellm-api-key: Bearer <key>`,
+    // not a standard `Authorization` header. See docs.litellm.ai/docs/mcp
+    // "Forwarding Custom Headers to MCP Servers" section.
+    const headers = {
+        'Content-Type': 'application/json',
+        Accept: 'application/json, text/event-stream',
+    };
+    if (apiKey) {
+        headers['x-litellm-api-key'] = `Bearer ${apiKey}`;
+    }
+    return headers;
+}
+async function fetchJson(endpoint, options) {
     const controller = new AbortController();
     const timeout = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
     try {
         const res = await fetch(endpoint, {
+            method: options.method,
             signal: controller.signal,
             redirect: 'error',
-            headers,
+            headers: options.headers,
+            body: options.body,
         });
         if (!res.ok)
             return null;
+        const contentType = res.headers.get('content-type')?.toLowerCase() ?? '';
         const text = await res.text();
         if (text.length > MAX_RESPONSE_SIZE)
             return null;
+        // MCP Streamable HTTP transport may return either application/json
+        // or text/event-stream. SSE responses look like:
+        //   event: message
+        //   data: {"jsonrpc":"2.0","id":1,"result":{"tools":[...]}}
+        //
+        // We extract the first `data:` line's payload and parse that as JSON.
+        // If the content type is JSON, we parse directly.
+        if (contentType.includes('text/event-stream')) {
+            return parseSseFirstDataEvent(text);
+        }
         try {
             return JSON.parse(text);
         }
         catch {
-            return null;
+            // Some servers omit the content-type header but return SSE anyway.
+            // Try SSE parsing as a fallback before giving up.
+            return parseSseFirstDataEvent(text);
         }
     }
     finally {
         clearTimeout(timeout);
     }
 }
+/**
+ * Extract the first `data: ...` payload from a Server-Sent Events response
+ * body and parse it as JSON. Returns null if no valid data line is found.
+ *
+ * Handles:
+ *   event: message
+ *   data: {"jsonrpc":"2.0",...}
+ *
+ * And multi-line data fields (per SSE spec — though rare for MCP).
+ */
+function parseSseFirstDataEvent(body) {
+    const lines = body.split(/\r?\n/);
+    const dataParts = [];
+    for (const line of lines) {
+        if (line.startsWith('data:')) {
+            // Strip the "data:" prefix and any single leading space.
+            dataParts.push(line.slice(5).replace(/^ /, ''));
+        }
+        else if (line === '' && dataParts.length > 0) {
+            // Empty line terminates the first SSE event — stop collecting.
+            break;
+        }
+    }
+    if (dataParts.length === 0)
+        return null;
+    try {
+        return JSON.parse(dataParts.join('\n'));
+    }
+    catch {
+        return null;
+    }
+}

package/dist/src/presentation/web/app/actions/fetch-mcp-server-tools.d.ts

@@ -1,5 +1,5 @@
 import type { FetchMcpServerToolsResult } from '../../../../../packages/core/src/application/use-cases/mcp-servers/fetch-mcp-server-tools.use-case.js';
-export declare function fetchMcpServerToolsAction(): Promise<FetchMcpServerToolsResult & {
+export declare function fetchMcpServerToolsAction(serverName: string): Promise<FetchMcpServerToolsResult & {
     error?: string;
 }>;
 //# sourceMappingURL=fetch-mcp-server-tools.d.ts.map

package/dist/src/presentation/web/app/actions/fetch-mcp-server-tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fetch-mcp-server-tools.d.ts","sourceRoot":"","sources":["../../../../../../src/presentation/web/app/actions/fetch-mcp-server-tools.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mFAAmF,CAAC;AAEnI,wBAAsB,yBAAyB,IAAI,OAAO,CACxD,yBAAyB,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAC/C,CAOA"}
+{"version":3,"file":"fetch-mcp-server-tools.d.ts","sourceRoot":"","sources":["../../../../../../src/presentation/web/app/actions/fetch-mcp-server-tools.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mFAAmF,CAAC;AAEnI,wBAAsB,yBAAyB,CAC7C,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,yBAAyB,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAOzD"}

package/dist/src/presentation/web/app/actions/fetch-mcp-server-tools.js

@@ -1,9 +1,9 @@
 'use server';
 import { resolve } from '../../lib/server-container.js';
-export async function fetchMcpServerToolsAction() {
+export async function fetchMcpServerToolsAction(serverName) {
     try {
         const useCase = resolve('FetchMcpServerToolsUseCase');
-        return await useCase.execute();
+        return await useCase.execute({ serverName });
     }
     catch {
         return { tools: [], error: 'Failed to fetch MCP server tools' };

package/dist/src/presentation/web/app/mcp-servers/page.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"page.d.ts","sourceRoot":"","sources":["../../../../../../src/presentation/web/app/mcp-servers/page.tsx"],"names":[],"mappings":"AAMA,wBAA8B,cAAc,qDAc3C"}
+{"version":3,"file":"page.d.ts","sourceRoot":"","sources":["../../../../../../src/presentation/web/app/mcp-servers/page.tsx"],"names":[],"mappings":"AAMA,wBAA8B,cAAc,qDAgB3C"}

package/dist/src/presentation/web/app/mcp-servers/page.js

@@ -8,13 +8,15 @@ export default async function McpServersPage() {
     if (!flags.mcpServers)
         notFound();
     let proxyConfigured = false;
+    let proxyBaseUrl = '';
     try {
         const useCase = resolve('LoadSettingsUseCase');
         const settings = await useCase.execute();
         proxyConfigured = !!settings.litellmProxy?.baseUrl;
+        proxyBaseUrl = settings.litellmProxy?.baseUrl ?? '';
     }
     catch {
         // Settings not available
     }
-    return _jsx(McpServersPageClient, { proxyConfigured: proxyConfigured });
+    return _jsx(McpServersPageClient, { proxyConfigured: proxyConfigured, proxyBaseUrl: proxyBaseUrl });
 }

package/dist/src/presentation/web/components/features/mcp-servers/mcp-connect-instructions.d.ts

@@ -0,0 +1,19 @@
+interface McpConnectInstructionsProps {
+    proxyBaseUrl: string;
+    serverName: string;
+}
+type ClientId = 'claude-code' | 'cursor' | 'vscode' | 'gemini' | 'codex' | 'curl';
+/**
+ * Generate copy-pasteable connection snippets for various MCP clients.
+ *
+ * The LiteLLM proxy exposes each MCP server at {proxyBaseUrl}/{serverName}/mcp
+ * and authenticates via the `x-litellm-api-key: Bearer <key>` header.
+ *
+ * All snippets use `<LITELLM_API_KEY>` as a placeholder that the user must
+ * replace with their actual virtual key — we never inline a real key into
+ * copyable instructions.
+ */
+export declare function buildSnippet(clientId: ClientId, proxyBaseUrl: string, serverName: string): string;
+export declare function McpConnectInstructions({ proxyBaseUrl, serverName }: McpConnectInstructionsProps): import("react/jsx-runtime").JSX.Element;
+export {};
+//# sourceMappingURL=mcp-connect-instructions.d.ts.map

package/dist/src/presentation/web/components/features/mcp-servers/mcp-connect-instructions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-connect-instructions.d.ts","sourceRoot":"","sources":["../../../../../../../src/presentation/web/components/features/mcp-servers/mcp-connect-instructions.tsx"],"names":[],"mappings":"AAOA,UAAU,2BAA2B;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,KAAK,QAAQ,GAAG,aAAa,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;AAgBlF;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAkFjG;AAED,wBAAgB,sBAAsB,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,2BAA2B,2CAkE/F"}

package/dist/src/presentation/web/components/features/mcp-servers/mcp-connect-instructions.js

@@ -0,0 +1,106 @@
+'use client';
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useState } from 'react';
+import { useTranslation } from 'react-i18next';
+import { Button } from '../../ui/button.js';
+import { Check, Copy } from 'lucide-react';
+const CLIENTS = [
+    { id: 'claude-code', label: 'Claude Code' },
+    { id: 'cursor', label: 'Cursor' },
+    { id: 'vscode', label: 'VS Code' },
+    { id: 'gemini', label: 'Gemini CLI' },
+    { id: 'codex', label: 'Codex CLI' },
+    { id: 'curl', label: 'cURL' },
+];
+/**
+ * Generate copy-pasteable connection snippets for various MCP clients.
+ *
+ * The LiteLLM proxy exposes each MCP server at {proxyBaseUrl}/{serverName}/mcp
+ * and authenticates via the `x-litellm-api-key: Bearer <key>` header.
+ *
+ * All snippets use `<LITELLM_API_KEY>` as a placeholder that the user must
+ * replace with their actual virtual key — we never inline a real key into
+ * copyable instructions.
+ */
+export function buildSnippet(clientId, proxyBaseUrl, serverName) {
+    const endpoint = `${proxyBaseUrl.replace(/\/$/, '')}/${serverName}/mcp`;
+    switch (clientId) {
+        case 'claude-code':
+            // Claude Code supports `claude mcp add` command
+            return [
+                `claude mcp add --transport http ${serverName} \\`,
+                `  ${endpoint} \\`,
+                `  --header "x-litellm-api-key: Bearer <LITELLM_API_KEY>"`,
+            ].join('\n');
+        case 'cursor':
+            // Cursor: ~/.cursor/mcp.json
+            return JSON.stringify({
+                mcpServers: {
+                    [serverName]: {
+                        url: endpoint,
+                        headers: {
+                            'x-litellm-api-key': 'Bearer <LITELLM_API_KEY>',
+                        },
+                    },
+                },
+            }, null, 2);
+        case 'vscode':
+            // VS Code / Copilot: settings.json under "mcp"
+            return JSON.stringify({
+                mcp: {
+                    servers: {
+                        [serverName]: {
+                            type: 'http',
+                            url: endpoint,
+                            headers: {
+                                'x-litellm-api-key': 'Bearer <LITELLM_API_KEY>',
+                            },
+                        },
+                    },
+                },
+            }, null, 2);
+        case 'gemini':
+            // Gemini CLI: ~/.gemini/settings.json or project .gemini/settings.json
+            return JSON.stringify({
+                mcpServers: {
+                    [serverName]: {
+                        httpUrl: endpoint,
+                        headers: {
+                            'x-litellm-api-key': 'Bearer <LITELLM_API_KEY>',
+                        },
+                    },
+                },
+            }, null, 2);
+        case 'codex':
+            // Codex CLI: ~/.codex/config.toml
+            return [
+                `[mcp_servers.${serverName}]`,
+                `url = "${endpoint}"`,
+                `headers = { "x-litellm-api-key" = "Bearer <LITELLM_API_KEY>" }`,
+            ].join('\n');
+        case 'curl':
+            return [
+                `curl --location '${endpoint}' \\`,
+                `  --header 'Content-Type: application/json' \\`,
+                `  --header 'x-litellm-api-key: Bearer <LITELLM_API_KEY>' \\`,
+                `  --data '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'`,
+            ].join('\n');
+    }
+}
+export function McpConnectInstructions({ proxyBaseUrl, serverName }) {
+    const { t } = useTranslation('web');
+    const [activeClient, setActiveClient] = useState('claude-code');
+    const [copied, setCopied] = useState(false);
+    const snippet = buildSnippet(activeClient, proxyBaseUrl, serverName);
+    const handleCopy = async () => {
+        try {
+            await navigator.clipboard.writeText(snippet);
+            setCopied(true);
+            setTimeout(() => setCopied(false), 2000);
+        }
+        catch {
+            // Clipboard not available (e.g., insecure context) — silently ignore.
+        }
+    };
+    return (_jsxs("div", { className: "space-y-3", children: [_jsx("div", { className: "flex flex-wrap gap-1.5 rounded-lg border border-slate-200/60 bg-slate-50/50 p-1 dark:border-slate-700/50 dark:bg-slate-900/40", role: "tablist", "aria-label": t('mcpServers.connect.title'), children: CLIENTS.map((client) => (_jsx("button", { type: "button", role: "tab", "aria-selected": activeClient === client.id, onClick: () => setActiveClient(client.id), "data-state": activeClient === client.id ? 'active' : 'inactive', className: "data-[state=active]:bg-card data-[state=active]:text-primary text-muted-foreground hover:text-foreground rounded-md px-2.5 py-1 text-xs font-medium transition-all data-[state=active]:shadow-sm data-[state=active]:ring-1 data-[state=active]:ring-slate-200/70 dark:data-[state=active]:ring-slate-700/50", children: client.label }, client.id))) }), _jsxs("div", { className: "editorial-shadow group relative overflow-hidden rounded-xl border border-slate-200/60 bg-slate-50/60 dark:border-slate-700/50 dark:bg-slate-900/60", children: [_jsxs("div", { className: "flex items-center justify-between border-b border-slate-200/60 bg-slate-100/40 px-3 py-2 dark:border-slate-700/50 dark:bg-slate-900/40", children: [_jsxs("div", { className: "flex items-center gap-1.5", children: [_jsx("span", { className: "size-2 rounded-full bg-slate-300 dark:bg-slate-600", "aria-hidden": true }), _jsx("span", { className: "size-2 rounded-full bg-slate-300 dark:bg-slate-600", "aria-hidden": true }), _jsx("span", { className: "size-2 rounded-full bg-slate-300 dark:bg-slate-600", "aria-hidden": true })] }), _jsx(Button, { type: "button", variant: "ghost", size: "icon", className: "size-6 shrink-0", onClick: handleCopy, "aria-label": t('mcpServers.connect.copy'), children: copied ? _jsx(Check, { className: "text-primary size-3" }) : _jsx(Copy, { className: "size-3" }) })] }), _jsx("pre", { className: "max-h-64 overflow-auto p-3 font-mono text-[11px] leading-relaxed", children: _jsx("code", { children: snippet }) })] }), _jsx("p", { className: "text-muted-foreground text-xs", children: t('mcpServers.connect.replaceKey') })] }));
+}

package/dist/src/presentation/web/components/features/mcp-servers/mcp-connect-instructions.stories.d.ts

@@ -0,0 +1,11 @@
+import type { StoryObj } from '@storybook/react-vite';
+import { McpConnectInstructions } from './mcp-connect-instructions.js';
+declare const meta: {
+    title: string;
+    component: typeof McpConnectInstructions;
+};
+export default meta;
+type Story = StoryObj<typeof meta>;
+export declare const Default: Story;
+export declare const HttpsProxy: Story;
+//# sourceMappingURL=mcp-connect-instructions.stories.d.ts.map

package/dist/src/presentation/web/components/features/mcp-servers/mcp-connect-instructions.stories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-connect-instructions.stories.d.ts","sourceRoot":"","sources":["../../../../../../../src/presentation/web/components/features/mcp-servers/mcp-connect-instructions.stories.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAQ,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAEpE,QAAA,MAAM,IAAI;;;CAGqC,CAAC;AAEhD,eAAe,IAAI,CAAC;AACpB,KAAK,KAAK,GAAG,QAAQ,CAAC,OAAO,IAAI,CAAC,CAAC;AAEnC,eAAO,MAAM,OAAO,EAAE,KAKrB,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,KAKxB,CAAC"}

package/dist/src/presentation/web/components/features/mcp-servers/mcp-connect-instructions.stories.js

@@ -0,0 +1,18 @@
+import { McpConnectInstructions } from './mcp-connect-instructions.js';
+const meta = {
+    title: 'Features/McpServers/McpConnectInstructions',
+    component: McpConnectInstructions,
+};
+export default meta;
+export const Default = {
+    args: {
+        proxyBaseUrl: 'http://localhost:4000',
+        serverName: 'deepwiki_mcp',
+    },
+};
+export const HttpsProxy = {
+    args: {
+        proxyBaseUrl: 'https://litellm.example.com',
+        serverName: 'github_mcp',
+    },
+};

package/dist/src/presentation/web/components/features/mcp-servers/mcp-server-card.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-server-card.d.ts","sourceRoot":"","sources":["../../../../../../../src/presentation/web/components/features/mcp-servers/mcp-server-card.tsx"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gFAAgF,CAAC;AAEpH,UAAU,kBAAkB;IAC1B,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC;CAC3C;AAQD,wBAAgB,aAAa,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,kBAAkB,2CAyCrE"}
+{"version":3,"file":"mcp-server-card.d.ts","sourceRoot":"","sources":["../../../../../../../src/presentation/web/components/features/mcp-servers/mcp-server-card.tsx"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gFAAgF,CAAC;AAEpH,UAAU,kBAAkB;IAC1B,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC;CAC3C;AAED,wBAAgB,aAAa,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,kBAAkB,2CAkDrE"}