@xen-orchestra/rest-api 0.31.1 → 0.32.0

package/dist/mcp/mcp.helper.mjs

@@ -0,0 +1,11 @@
+// Single source of truth for reading the MCP kill-switch flag. Defaults to
+// `true` so legacy configs without a `[mcp]` section keep MCP enabled.
+export function isMcpEnabled(restApi) {
+    return restApi.xoApp.config.getOptional('mcp.enabled') ?? true;
+}
+// Wire-level identifier used by the kill-switch contract; shared between the
+// gate middleware (`@xen-orchestra/rest-api`) and the controller response.
+export const MCP_DISABLED_ERROR = 'mcp_disabled';
+// Whitelisted by `mcp-gate` so the MCP binary can probe the kill-switch
+// state at boot even when MCP is globally disabled.
+export const MCP_STATUS_PATH = '/mcp/status';

package/dist/messages/message.controller.mjs

@@ -7,7 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Example, Get, Middlewares, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
+import { Example, Extension, Get, Middlewares, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
 import { inject } from 'inversify';
 import { noSuchObject } from 'xo-common/api-errors.js';
 import { provide } from 'inversify-binding-decorators';
@@ -73,6 +73,7 @@ let MessageController = class MessageController extends XapiXoController {
 __decorate([
     Example(messageIds),
     Example(partialMessages),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -84,6 +85,7 @@ __decorate([
 ], MessageController.prototype, "getMessages", null);
 __decorate([
     Example(message),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({
         resource: 'message',

package/dist/middlewares/mcp-gate.middleware.mjs

@@ -0,0 +1,30 @@
+import { ApiError } from '../helpers/error.helper.mjs';
+import { iocContainer } from '../ioc/ioc.mjs';
+import { isMcpEnabled, MCP_DISABLED_ERROR, MCP_STATUS_PATH } from '../mcp/mcp.helper.mjs';
+import { RestApi } from '../rest-api/rest-api.mjs';
+// Identifies requests originating from the `@xen-orchestra/mcp` binary.
+//
+// SECURITY: the header is NOT authenticated — any client can spoof it. Use it
+// only to RESTRICT behaviour (e.g. the MCP kill-switch), never to grant
+// privileges.
+function isMcpRequest(req) {
+    // Node lowercases header names; values keep their original case so we
+    // normalize before comparing. `Array.isArray` covers the unusual case of
+    // a duplicated header value (a malformed or hostile client).
+    const header = req.headers['x-xo-client'];
+    const value = Array.isArray(header) ? header[0] : header;
+    return typeof value === 'string' && value.toLowerCase() === 'mcp';
+}
+export function mcpGateMiddleware(req, _res, next) {
+    if (!isMcpRequest(req)) {
+        return next();
+    }
+    // Always let the kill-switch probe through so the MCP binary can fail-fast.
+    if (req.path === MCP_STATUS_PATH) {
+        return next();
+    }
+    if (!isMcpEnabled(iocContainer.get(RestApi))) {
+        return next(new ApiError('MCP is disabled by administrator', 503, { data: { error: MCP_DISABLED_ERROR } }));
+    }
+    next();
+}

package/dist/networks/network.controller.mjs

@@ -7,7 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Example, Get, Path, Query, Response, Request, Route, Security, Tags, Delete, SuccessResponse, Put, Middlewares, } from 'tsoa';
+import { Delete, Example, Extension, Get, Middlewares, Path, Put, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
 import { inject } from 'inversify';
 import { provide } from 'inversify-binding-decorators';
 import { AlarmService } from '../alarms/alarm.service.mjs';
@@ -139,6 +139,7 @@ let NetworkController = class NetworkController extends XapiXoController {
 __decorate([
     Example(networkIds),
     Example(partialNetworks),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -150,6 +151,7 @@ __decorate([
 ], NetworkController.prototype, "getNetworks", null);
 __decorate([
     Example(network),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({ resource: 'network', action: 'read', objectId: 'params.id' })),
     Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
@@ -157,6 +159,7 @@ __decorate([
     __param(0, Path())
 ], NetworkController.prototype, "getNetwork", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Delete('{id}'),
     Middlewares(acl({ resource: 'network', action: 'delete', objectId: 'params.id' })),
     Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
@@ -166,6 +169,7 @@ __decorate([
 ], NetworkController.prototype, "deleteNetwork", null);
 __decorate([
     Example(genericAlarmsExample),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/alarms'),
     Security('*', ['acl']),
     Tags('alarms'),
@@ -181,6 +185,7 @@ __decorate([
 __decorate([
     Example(messageIds),
     Example(partialMessages),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/messages'),
     Security('*', ['acl']),
     Tags('messages'),
@@ -196,6 +201,7 @@ __decorate([
 __decorate([
     Example(taskIds),
     Example(partialTasks),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/tasks'),
     Security('*', ['acl']),
     Tags('tasks'),
@@ -209,6 +215,7 @@ __decorate([
     __param(6, Query())
 ], NetworkController.prototype, "getNetworkTasks", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Put('{id}/tags/{tag}'),
     Middlewares(acl({ resource: 'network', action: 'update:tags', objectId: 'params.id' })),
     SuccessResponse(noContentResp.status, noContentResp.description),
@@ -218,6 +225,7 @@ __decorate([
     __param(1, Path())
 ], NetworkController.prototype, "putNetworkTag", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Delete('{id}/tags/{tag}'),
     Middlewares(acl({ resource: 'network', action: 'update:tags', objectId: 'params.id' })),
     SuccessResponse(noContentResp.status, noContentResp.description),

package/dist/open-api/routes/routes.js

@@ -50,6 +50,8 @@ import { NetworkController } from './../../networks/network.controller.mjs';
 // WARNING: This file was auto-generated with tsoa. Please do not modify it. Re-run tsoa to re-generate this file: https://github.com/lukeautry/tsoa
 import { MessageController } from './../../messages/message.controller.mjs';
 // WARNING: This file was auto-generated with tsoa. Please do not modify it. Re-run tsoa to re-generate this file: https://github.com/lukeautry/tsoa
+import { McpController } from './../../mcp/mcp.controller.mjs';
+// WARNING: This file was auto-generated with tsoa. Please do not modify it. Re-run tsoa to re-generate this file: https://github.com/lukeautry/tsoa
 import { HostController } from './../../hosts/host.controller.mjs';
 // WARNING: This file was auto-generated with tsoa. Please do not modify it. Re-run tsoa to re-generate this file: https://github.com/lukeautry/tsoa
 import { GroupController } from './../../groups/group.controller.mjs';
@@ -534,7 +536,7 @@ const models = {
     // WARNING: This file was auto-generated with tsoa. Please do not modify it. Re-run tsoa to re-generate this file: https://github.com/lukeautry/tsoa
     "CreateVdiBody": {
         "dataType": "refAlias",
-        "type": { "dataType": "intersection", "subSchemas": [{ "ref": "Omit_CreateVdiParams_91_0_93_.SR-or-other_config_" }, { "dataType": "nestedObjectLiteral", "nestedProperties": { "other_config": { "dataType": "nestedObjectLiteral", "nestedProperties": {}, "additionalProperties": { "dataType": "string" }, "required": true }, "srId": { "dataType": "string", "required": true } } }, { "dataType": "union", "subSchemas": [{ "dataType": "nestedObjectLiteral", "nestedProperties": { "sm_config": { "ref": "Record_string.string_" } } }, { "dataType": "undefined" }] }], "validators": {} },
+        "type": { "dataType": "intersection", "subSchemas": [{ "ref": "Omit_CreateVdiParams_91_0_93_.SR-or-other_config_" }, { "dataType": "nestedObjectLiteral", "nestedProperties": { "other_config": { "dataType": "nestedObjectLiteral", "nestedProperties": {}, "additionalProperties": { "dataType": "string" } }, "srId": { "dataType": "string", "required": true } } }, { "dataType": "union", "subSchemas": [{ "dataType": "nestedObjectLiteral", "nestedProperties": { "sm_config": { "ref": "Record_string.string_" } } }, { "dataType": "undefined" }] }], "validators": {} },
     },
     // WARNING: This file was auto-generated with tsoa. Please do not modify it. Re-run tsoa to re-generate this file: https://github.com/lukeautry/tsoa
     "CreateActionReturnType__id-Unbrand_XoVdi__91_id_93___": {
@@ -1072,6 +1074,11 @@ const models = {
         "type": { "ref": "Unbrand_XoMessage_", "validators": {} },
     },
     // WARNING: This file was auto-generated with tsoa. Please do not modify it. Re-run tsoa to re-generate this file: https://github.com/lukeautry/tsoa
+    "McpStatus": {
+        "dataType": "refAlias",
+        "type": { "dataType": "nestedObjectLiteral", "nestedProperties": { "enabled": { "dataType": "enum", "enums": [true], "required": true } }, "validators": {} },
+    },
+    // WARNING: This file was auto-generated with tsoa. Please do not modify it. Re-run tsoa to re-generate this file: https://github.com/lukeautry/tsoa
     "Record_string.HOST_ALLOWED_OPERATIONS_": {
         "dataType": "refAlias",
         "type": { "dataType": "nestedObjectLiteral", "nestedProperties": {}, "validators": {} },
@@ -6865,6 +6872,31 @@ export function RegisterRoutes(app) {
         }
     });
     // WARNING: This file was auto-generated with tsoa. Please do not modify it. Re-run tsoa to re-generate this file: https://github.com/lukeautry/tsoa
+    const argsMcpController_getMcpStatus = {};
+    app.get('/rest/v0/mcp/status', authenticateMiddleware([{ "none": [] }]), ...(fetchMiddlewares(McpController)), ...(fetchMiddlewares(McpController.prototype.getMcpStatus)), async function McpController_getMcpStatus(request, response, next) {
+        // WARNING: This file was auto-generated with tsoa. Please do not modify it. Re-run tsoa to re-generate this file: https://github.com/lukeautry/tsoa
+        let validatedArgs = [];
+        try {
+            validatedArgs = templateService.getValidatedArgs({ args: argsMcpController_getMcpStatus, request, response });
+            const container = typeof iocContainer === 'function' ? iocContainer(request) : iocContainer;
+            const controller = await container.get(McpController);
+            if (typeof controller['setStatus'] === 'function') {
+                controller.setStatus(undefined);
+            }
+            await templateService.apiHandler({
+                methodName: 'getMcpStatus',
+                controller,
+                response,
+                next,
+                validatedArgs,
+                successStatus: 200,
+            });
+        }
+        catch (err) {
+            return next(err);
+        }
+    });
+    // WARNING: This file was auto-generated with tsoa. Please do not modify it. Re-run tsoa to re-generate this file: https://github.com/lukeautry/tsoa
     const argsHostController_getHosts = {
         req: { "in": "request", "name": "req", "required": true, "dataType": "object" },
         fields: { "in": "query", "name": "fields", "dataType": "string" },

package/dist/pbds/pbd.controller.mjs

@@ -9,7 +9,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 };
 import { inject } from 'inversify';
 import { provide } from 'inversify-binding-decorators';
-import { Middlewares, Route, Security, Request, Response, Get, Query, Path, Tags, Example, Post, SuccessResponse } from 'tsoa';
+import { Example, Extension, Get, Middlewares, Path, Post, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
 import { acl } from '../middlewares/acl.middleware.mjs';
 import { asynchronousActionResp, badRequestResp, internalServerErrorResp, invalidParameters as invalidParametersResp, noContentResp, forbiddenOperationResp, notFoundResp, unauthorizedResp, } from '../open-api/common/response.common.mjs';
 import { RestApi } from '../rest-api/rest-api.mjs';
@@ -83,6 +83,7 @@ let PbdController = class PbdController extends XapiXoController {
 __decorate([
     Example(pbdIds),
     Example(partialPbds),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -94,6 +95,7 @@ __decorate([
 ], PbdController.prototype, "getPbds", null);
 __decorate([
     Example(pbd),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({ resource: 'pbd', action: 'read', objectId: 'params.id' })),
     Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
@@ -102,6 +104,7 @@ __decorate([
 ], PbdController.prototype, "getPbd", null);
 __decorate([
     Example(taskLocation),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/plug'),
     SuccessResponse(asynchronousActionResp.status, asynchronousActionResp.description),
     Response(noContentResp.status, noContentResp.description),
@@ -113,6 +116,7 @@ __decorate([
 ], PbdController.prototype, "plugPbd", null);
 __decorate([
     Example(taskLocation),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/unplug'),
     SuccessResponse(asynchronousActionResp.status, asynchronousActionResp.description),
     Response(noContentResp.status, noContentResp.description),

package/dist/pcis/pci.controller.mjs

@@ -7,7 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Example, Get, Middlewares, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
+import { Example, Extension, Get, Middlewares, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
 import { inject } from 'inversify';
 import { provide } from 'inversify-binding-decorators';
 import { acl } from '../middlewares/acl.middleware.mjs';
@@ -46,6 +46,7 @@ let PciController = class PciController extends XapiXoController {
 __decorate([
     Example(pciIds),
     Example(partialPcis),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -57,6 +58,7 @@ __decorate([
 ], PciController.prototype, "getPcis", null);
 __decorate([
     Example(pci),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({ resource: 'pci', action: 'read', objectId: 'params.id' })),
     Response(forbiddenOperationResp.status, forbiddenOperationResp.description),

package/dist/pgpus/pgpu.controller.mjs

@@ -10,7 +10,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 import { inject } from 'inversify';
 import { RestApi } from '../rest-api/rest-api.mjs';
 import { XapiXoController } from '../abstract-classes/xapi-xo-controller.mjs';
-import { Example, Get, Middlewares, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
+import { Example, Extension, Get, Middlewares, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
 import { acl } from '../middlewares/acl.middleware.mjs';
 import { badRequestResp, forbiddenOperationResp, notFoundResp, unauthorizedResp, } from '../open-api/common/response.common.mjs';
 import { provide } from 'inversify-binding-decorators';
@@ -46,6 +46,7 @@ let PgpuController = class PgpuController extends XapiXoController {
 __decorate([
     Example(pgpuIds),
     Example(partialPgpus),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -57,6 +58,7 @@ __decorate([
 ], PgpuController.prototype, "getPgpus", null);
 __decorate([
     Example(pgpu),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({ resource: 'pgpu', action: 'read', objectId: 'params.id' })),
     Response(forbiddenOperationResp.status, forbiddenOperationResp.description),

package/dist/pifs/pif.controller.mjs

@@ -7,7 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Example, Get, Middlewares, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
+import { Example, Extension, Get, Middlewares, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
 import { inject } from 'inversify';
 import { provide } from 'inversify-binding-decorators';
 import { AlarmService } from '../alarms/alarm.service.mjs';
@@ -107,6 +107,7 @@ let PifController = class PifController extends XapiXoController {
 __decorate([
     Example(pifIds),
     Example(partialPifs),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -118,6 +119,7 @@ __decorate([
 ], PifController.prototype, "getPifs", null);
 __decorate([
     Example(pif),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({ resource: 'pif', action: 'read', objectId: 'params.id' })),
     Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
@@ -126,6 +128,7 @@ __decorate([
 ], PifController.prototype, "getPif", null);
 __decorate([
     Example(genericAlarmsExample),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/alarms'),
     Security('*', ['acl']),
     Tags('alarms'),
@@ -141,6 +144,7 @@ __decorate([
 __decorate([
     Example(messageIds),
     Example(partialMessages),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/messages'),
     Security('*', ['acl']),
     Tags('messages'),
@@ -156,6 +160,7 @@ __decorate([
 __decorate([
     Example(taskIds),
     Example(partialTasks),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/tasks'),
     Security('*', ['acl']),
     Tags('tasks'),

package/dist/pools/pool.controller.mjs

@@ -7,7 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Example, Get, Path, Query, Response, Request, Route, Security, Tags, Post, Middlewares, Body, SuccessResponse, Put, Delete, } from 'tsoa';
+import { Body, Delete, Example, Extension, Get, Middlewares, Path, Post, Put, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
 import { inject } from 'inversify';
 import { invalidParameters } from 'xo-common/api-errors.js';
 import { PassThrough } from 'node:stream';
@@ -427,6 +427,7 @@ let PoolController = class PoolController extends XapiXoController {
 __decorate([
     Example(poolIds),
     Example(partialPools),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -438,6 +439,7 @@ __decorate([
 ], PoolController.prototype, "getPools", null);
 __decorate([
     Example(pool),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({ resource: 'pool', action: 'read', objectId: 'params.id' })),
     Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
@@ -447,6 +449,7 @@ __decorate([
 __decorate([
     Example(taskLocation),
     Example(createNetwork),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/create_network'),
     Middlewares([
         json(),
@@ -470,6 +473,7 @@ __decorate([
 __decorate([
     Example(taskLocation),
     Example(createNetwork),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/create_bonded_network'),
     Middlewares(json()),
     Tags('networks'),
@@ -485,6 +489,7 @@ __decorate([
 __decorate([
     Example(taskLocation),
     Example(createNetwork),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/create_internal_network'),
     Middlewares(json()),
     Tags('networks'),
@@ -499,6 +504,7 @@ __decorate([
 ], PoolController.prototype, "createInternalNetwork", null);
 __decorate([
     Example(taskLocation),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/emergency_shutdown'),
     Middlewares(acl({ resource: 'pool', action: 'emergency-shutdown', objectId: 'params.id' })),
     SuccessResponse(asynchronousActionResp.status, asynchronousActionResp.description),
@@ -511,6 +517,7 @@ __decorate([
 ], PoolController.prototype, "emergencyShutdown", null);
 __decorate([
     Example(taskLocation),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/rolling_reboot'),
     Middlewares(acl({ resource: 'pool', action: 'rolling-reboot', objectId: 'params.id' })),
     SuccessResponse(asynchronousActionResp.status, asynchronousActionResp.description),
@@ -523,6 +530,7 @@ __decorate([
 ], PoolController.prototype, "rollingReboot", null);
 __decorate([
     Example(taskLocation),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/rolling_update'),
     Middlewares(acl({ resource: 'pool', action: 'rolling-update', objectId: 'params.id' })),
     SuccessResponse(asynchronousActionResp.status, asynchronousActionResp.description),
@@ -535,6 +543,7 @@ __decorate([
 ], PoolController.prototype, "rollingUpdate", null);
 __decorate([
     Example(importVm),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/vms'),
     Middlewares(acl([
         {
@@ -563,6 +572,7 @@ __decorate([
 __decorate([
     Example(taskLocation),
     Example(createVm),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/create_vm'),
     Middlewares([
         json(),
@@ -607,6 +617,7 @@ __decorate([
 ], PoolController.prototype, "createVm", null);
 __decorate([
     Example(poolStats),
+    Extension('x-mcp-exposure', 'deny'),
     Get('{id}/stats'),
     Middlewares(acl({ resource: 'pool', action: 'read', objectId: 'params.id' })),
     Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
@@ -617,6 +628,7 @@ __decorate([
 ], PoolController.prototype, "getStats", null);
 __decorate([
     Example(poolDashboard),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/dashboard'),
     Middlewares(acl({ resource: 'pool', action: 'read', objectId: 'params.id' })),
     Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
@@ -627,6 +639,7 @@ __decorate([
 ], PoolController.prototype, "getPoolDashboard", null);
 __decorate([
     Example(genericAlarmsExample),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/alarms'),
     Security('*', ['acl']),
     Tags('alarms'),
@@ -641,6 +654,7 @@ __decorate([
 ], PoolController.prototype, "getPoolAlarms", null);
 __decorate([
     Example(poolMissingPatches),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/missing_patches'),
     Middlewares(acl({ resource: 'pool', action: 'read', objectId: 'params.id' })),
     Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
@@ -651,6 +665,7 @@ __decorate([
 __decorate([
     Example(messageIds),
     Example(partialMessages),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/messages'),
     Security('*', ['acl']),
     Tags('messages'),
@@ -664,6 +679,7 @@ __decorate([
     __param(6, Query())
 ], PoolController.prototype, "getPoolMessages", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Put('{id}/tags/{tag}'),
     Middlewares(acl({ resource: 'pool', action: 'update:tags', objectId: 'params.id' })),
     SuccessResponse(noContentResp.status, noContentResp.description),
@@ -673,6 +689,7 @@ __decorate([
     __param(1, Path())
 ], PoolController.prototype, "putPoolTag", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Delete('{id}/tags/{tag}'),
     Middlewares(acl({ resource: 'pool', action: 'update:tags', objectId: 'params.id' })),
     SuccessResponse(noContentResp.status, noContentResp.description),
@@ -684,6 +701,7 @@ __decorate([
 __decorate([
     Example(taskIds),
     Example(partialTasks),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/tasks'),
     Security('*', ['acl']),
     Tags('tasks'),
@@ -698,6 +716,7 @@ __decorate([
 ], PoolController.prototype, "getPoolTasks", null);
 __decorate([
     Example(taskLocation),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/management_reconfigure'),
     Middlewares(json()),
     SuccessResponse(asynchronousActionResp.status, asynchronousActionResp.description),

package/dist/proxies/proxy.controller.mjs

@@ -7,7 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Example, Get, Middlewares, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
+import { Example, Extension, Get, Middlewares, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
 import { inject } from 'inversify';
 import { provide } from 'inversify-binding-decorators';
 import { acl } from '../middlewares/acl.middleware.mjs';
@@ -53,6 +53,7 @@ let ProxyController = class ProxyController extends XoController {
 __decorate([
     Example(proxyIds),
     Example(partialProxies),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -64,6 +65,7 @@ __decorate([
 ], ProxyController.prototype, "getProxies", null);
 __decorate([
     Example(proxy),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({
         resource: 'proxy',

package/dist/restore-logs/restore-log.controller.mjs

@@ -8,7 +8,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
 import { createLogger } from '@xen-orchestra/log';
-import { Deprecated, Example, Get, Middlewares, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
+import { Deprecated, Example, Extension, Get, Middlewares, Path, Query, Request, Response, Route, Security, Tags, } from 'tsoa';
 import { inject } from 'inversify';
 import { provide } from 'inversify-binding-decorators';
 import { acl, autoBindService } from '../middlewares/acl.middleware.mjs';
@@ -59,6 +59,7 @@ let RestoreLogController = class RestoreLogController extends XoController {
 __decorate([
     Example(restoreLogIds),
     Example(partialRestoreLogs),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -70,6 +71,7 @@ __decorate([
 ], RestoreLogController.prototype, "getRestoreLogs", null);
 __decorate([
     Example(restoreLog),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({
         resource: 'restore-log',
@@ -133,6 +135,7 @@ __decorate([
     Example(restoreLogIds),
     Example(partialRestoreLogs),
     Deprecated(),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     __param(0, Request()),
     __param(1, Query()),
@@ -144,6 +147,7 @@ __decorate([
 __decorate([
     Example(restoreLog),
     Deprecated(),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     __param(0, Path())
 ], DeprecatedRestoreController.prototype, "getDeprecatedRestoreLog", null);

package/dist/schedules/schedule.controller.mjs

@@ -7,7 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Example, Get, Middlewares, Path, Post, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
+import { Example, Extension, Get, Middlewares, Path, Post, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
 import { inject } from 'inversify';
 import { provide } from 'inversify-binding-decorators';
 import { acl } from '../middlewares/acl.middleware.mjs';
@@ -76,6 +76,7 @@ let ScheduleController = class ScheduleController extends XoController {
 __decorate([
     Example(scheduleIds),
     Example(partialSchedules),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -87,6 +88,7 @@ __decorate([
 ], ScheduleController.prototype, "getSchedules", null);
 __decorate([
     Example(schedule),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({
         resource: 'schedule',
@@ -100,6 +102,7 @@ __decorate([
 ], ScheduleController.prototype, "getSchedule", null);
 __decorate([
     Example(taskLocation),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/run'),
     Middlewares(acl({
         resource: 'schedule',

package/dist/servers/server.controller.mjs

@@ -7,7 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Body, Delete, Example, Get, Middlewares, Path, Post, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
+import { Body, Delete, Example, Extension, Get, Middlewares, Path, Post, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
 import { json } from 'express';
 import { inject } from 'inversify';
 import { provide } from 'inversify-binding-decorators';
@@ -131,6 +131,7 @@ let ServerController = class ServerController extends XoController {
 __decorate([
     Example(serverIds),
     Example(partialServers),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -142,6 +143,7 @@ __decorate([
 ], ServerController.prototype, "getServers", null);
 __decorate([
     Example(server),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({
         resource: 'server',
@@ -154,6 +156,7 @@ __decorate([
     __param(0, Path())
 ], ServerController.prototype, "getServer", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Delete('{id}'),
     Middlewares(acl({
         resource: 'server',
@@ -168,6 +171,7 @@ __decorate([
 ], ServerController.prototype, "deleteServer", null);
 __decorate([
     Example(serverId),
+    Extension('x-mcp-exposure', 'confirm'),
     Post(''),
     Middlewares([json(), acl({ resource: 'server', action: 'create', object: ({ req }) => req.body })]),
     SuccessResponse(createdResp.status, createdResp.description),
@@ -178,6 +182,7 @@ __decorate([
 ], ServerController.prototype, "addServer", null);
 __decorate([
     Example(taskLocation),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/connect'),
     Middlewares(acl({
         resource: 'server',
@@ -195,6 +200,7 @@ __decorate([
 ], ServerController.prototype, "connectServer", null);
 __decorate([
     Example(taskLocation),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/disconnect'),
     Middlewares(acl({
         resource: 'server',
@@ -213,6 +219,7 @@ __decorate([
 __decorate([
     Example(taskIds),
     Example(partialTasks),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/tasks'),
     Security('*', ['acl']),
     Tags('tasks'),