n8n 1.114.2 → 1.115.0

package/dist/modules/mcp/mcp-api-key.service.js

@@ -0,0 +1,157 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpServerApiKeyService = void 0;
+const db_1 = require("@n8n/db");
+const di_1 = require("@n8n/di");
+const crypto_1 = require("crypto");
+const auth_error_1 = require("../../errors/response-errors/auth.error");
+const jwt_service_1 = require("../../services/jwt.service");
+const API_KEY_AUDIENCE = 'mcp-server-api';
+const API_KEY_ISSUER = 'n8n';
+const REDACT_API_KEY_REVEAL_COUNT = 4;
+const REDACT_API_KEY_MAX_LENGTH = 10;
+const API_KEY_LABEL = 'MCP Server API Key';
+const REDACT_API_KEY_MIN_HIDDEN_CHARS = 6;
+let McpServerApiKeyService = class McpServerApiKeyService {
+    constructor(apiKeyRepository, jwtService, userRepository) {
+        this.apiKeyRepository = apiKeyRepository;
+        this.jwtService = jwtService;
+        this.userRepository = userRepository;
+    }
+    async createMcpServerApiKey(user, trx) {
+        const manager = trx ?? this.apiKeyRepository.manager;
+        const apiKey = this.jwtService.sign({
+            sub: user.id,
+            iss: API_KEY_ISSUER,
+            aud: API_KEY_AUDIENCE,
+            jti: (0, crypto_1.randomUUID)(),
+        });
+        const apiKeyEntity = this.apiKeyRepository.create({
+            userId: user.id,
+            apiKey,
+            audience: API_KEY_AUDIENCE,
+            scopes: [],
+            label: API_KEY_LABEL,
+        });
+        await manager.insert(db_1.ApiKey, apiKeyEntity);
+        return await manager.findOneByOrFail(db_1.ApiKey, { apiKey });
+    }
+    async findServerApiKeyForUser(user, { redact = true } = {}) {
+        const apiKey = await this.apiKeyRepository.findOne({
+            where: {
+                userId: user.id,
+                audience: API_KEY_AUDIENCE,
+            },
+        });
+        if (apiKey && redact) {
+            apiKey.apiKey = this.redactApiKey(apiKey.apiKey);
+        }
+        return apiKey;
+    }
+    async getUserForApiKey(apiKey) {
+        return await this.userRepository.findOne({
+            where: {
+                apiKeys: {
+                    apiKey,
+                    audience: API_KEY_AUDIENCE,
+                },
+            },
+            relations: ['role'],
+        });
+    }
+    async deleteAllMcpApiKeysForUser(user, trx) {
+        const manager = trx ?? this.apiKeyRepository.manager;
+        await manager.delete(db_1.ApiKey, {
+            userId: user.id,
+            audience: API_KEY_AUDIENCE,
+        });
+    }
+    redactApiKey(apiKey) {
+        if (REDACT_API_KEY_REVEAL_COUNT >= apiKey.length - REDACT_API_KEY_MIN_HIDDEN_CHARS) {
+            return '*'.repeat(apiKey.length);
+        }
+        const visiblePart = apiKey.slice(-REDACT_API_KEY_REVEAL_COUNT);
+        const redactedPart = '*'.repeat(Math.max(0, REDACT_API_KEY_MAX_LENGTH - REDACT_API_KEY_REVEAL_COUNT));
+        return redactedPart + visiblePart;
+    }
+    extractAPIKeyFromHeader(headerValue) {
+        if (!headerValue.startsWith('Bearer')) {
+            throw new auth_error_1.AuthError('Invalid authorization header format');
+        }
+        const apiKeyMatch = headerValue.match(/^Bearer\s+(.+)$/i);
+        if (apiKeyMatch) {
+            return apiKeyMatch[1];
+        }
+        throw new auth_error_1.AuthError('Invalid authorization header format');
+    }
+    getAuthMiddleware() {
+        return async (req, res, next) => {
+            const authorizationHeader = req.header('authorization');
+            if (!authorizationHeader) {
+                this.responseWithUnauthorized(res);
+                return;
+            }
+            const apiKey = this.extractAPIKeyFromHeader(authorizationHeader);
+            if (!apiKey) {
+                this.responseWithUnauthorized(res);
+                return;
+            }
+            const user = await this.getUserForApiKey(apiKey);
+            if (!user) {
+                this.responseWithUnauthorized(res);
+                return;
+            }
+            try {
+                this.jwtService.verify(apiKey, {
+                    issuer: API_KEY_ISSUER,
+                    audience: API_KEY_AUDIENCE,
+                });
+            }
+            catch (e) {
+                this.responseWithUnauthorized(res);
+                return;
+            }
+            req.user = user;
+            next();
+        };
+    }
+    responseWithUnauthorized(res) {
+        res.status(401).send({ message: 'Unauthorized' });
+    }
+    async getOrCreateApiKey(user) {
+        const apiKey = await this.apiKeyRepository.findOne({
+            where: {
+                userId: user.id,
+                audience: API_KEY_AUDIENCE,
+            },
+        });
+        if (apiKey) {
+            apiKey.apiKey = this.redactApiKey(apiKey.apiKey);
+            return apiKey;
+        }
+        return await this.createMcpServerApiKey(user);
+    }
+    async rotateMcpServerApiKey(user) {
+        return await this.apiKeyRepository.manager.transaction(async (trx) => {
+            await this.deleteAllMcpApiKeysForUser(user, trx);
+            return await this.createMcpServerApiKey(user, trx);
+        });
+    }
+};
+exports.McpServerApiKeyService = McpServerApiKeyService;
+exports.McpServerApiKeyService = McpServerApiKeyService = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [db_1.ApiKeyRepository,
+        jwt_service_1.JwtService,
+        db_1.UserRepository])
+], McpServerApiKeyService);
+//# sourceMappingURL=mcp-api-key.service.js.map

package/dist/modules/mcp/mcp-api-key.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-api-key.service.js","sourceRoot":"","sources":["../../../src/modules/mcp/mcp-api-key.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gCAA+F;AAC/F,gCAAkC;AAElC,mCAAoC;AAIpC,oEAAgE;AAChE,wDAAoD;AAEpD,MAAM,gBAAgB,GAAmB,gBAAgB,CAAC;AAC1D,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,2BAA2B,GAAG,CAAC,CAAC;AACtC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AACrC,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAC3C,MAAM,+BAA+B,GAAG,CAAC,CAAC;AAMnC,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;IAClC,YACkB,gBAAkC,EAClC,UAAsB,EACtB,cAA8B;QAF9B,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,eAAU,GAAV,UAAU,CAAY;QACtB,mBAAc,GAAd,cAAc,CAAgB;IAC7C,CAAC;IAEJ,KAAK,CAAC,qBAAqB,CAAC,IAAU,EAAE,GAAmB;QAC1D,MAAM,OAAO,GAAG,GAAG,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;QAErD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YACnC,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,GAAG,EAAE,cAAc;YACnB,GAAG,EAAE,gBAAgB;YACrB,GAAG,EAAE,IAAA,mBAAU,GAAE;SACjB,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;YACjD,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,MAAM;YACN,QAAQ,EAAE,gBAAgB;YAC1B,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,aAAa;SACpB,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,MAAM,CAAC,WAAM,EAAE,YAAY,CAAC,CAAC;QAE3C,OAAO,MAAM,OAAO,CAAC,eAAe,CAAC,WAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,IAAU,EAAE,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,EAAE;QAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YAClD,KAAK,EAAE;gBACN,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,gBAAgB;aAC1B;SACD,CAAC,CAAC;QAEH,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;YACtB,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,MAAM,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,MAAc;QAC5C,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YACxC,KAAK,EAAE;gBACN,OAAO,EAAE;oBACR,MAAM;oBACN,QAAQ,EAAE,gBAAgB;iBAC1B;aACD;YACD,SAAS,EAAE,CAAC,MAAM,CAAC;SACnB,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,IAAU,EAAE,GAAmB;QAC/D,MAAM,OAAO,GAAG,GAAG,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;QAErD,MAAM,OAAO,CAAC,MAAM,CAAC,WAAM,EAAE;YAC5B,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,QAAQ,EAAE,gBAAgB;SAC1B,CAAC,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,MAAc;QAClC,IAAI,2BAA2B,IAAI,MAAM,CAAC,MAAM,GAAG,+BAA+B,EAAE,CAAC;YACpF,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,2BAA2B,CAAC,CAAC;QAC/D,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAC9B,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,yBAAyB,GAAG,2BAA2B,CAAC,CACpE,CAAC;QAEF,OAAO,YAAY,GAAG,WAAW,CAAC;IACnC,CAAC;IAEO,uBAAuB,CAAC,WAAmB;QAClD,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,sBAAS,CAAC,qCAAqC,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC1D,IAAI,WAAW,EAAE,CAAC;YACjB,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC;QACD,MAAM,IAAI,sBAAS,CAAC,qCAAqC,CAAC,CAAC;IAC5D,CAAC;IAED,iBAAiB;QAChB,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YAChE,MAAM,mBAAmB,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAExD,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC1B,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;gBACnC,OAAO;YACR,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,CAAC;YAEjE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACb,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;gBACnC,OAAO;YACR,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAEjD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACX,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;gBACnC,OAAO;YACR,CAAC;YAED,IAAI,CAAC;gBACJ,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE;oBAC9B,MAAM,EAAE,cAAc;oBACtB,QAAQ,EAAE,gBAAgB;iBAC1B,CAAC,CAAC;YACJ,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACZ,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;gBACnC,OAAO;YACR,CAAC;YAEA,GAA4B,CAAC,IAAI,GAAG,IAAI,CAAC;YAE1C,IAAI,EAAE,CAAC;QACR,CAAC,CAAC;IACH,CAAC;IAEO,wBAAwB,CAAC,GAAa;QAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,IAAU;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YAClD,KAAK,EAAE;gBACN,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,gBAAgB;aAC1B;SACD,CAAC,CAAC;QAEH,IAAI,MAAM,EAAE,CAAC;YACZ,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACjD,OAAO,MAAM,CAAC;QACf,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,IAAU;QACrC,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACpE,MAAM,IAAI,CAAC,0BAA0B,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACjD,OAAO,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACJ,CAAC;CACD,CAAA;AA3JY,wDAAsB;iCAAtB,sBAAsB;IADlC,IAAA,YAAO,GAAE;qCAG2B,qBAAgB;QACtB,wBAAU;QACN,mBAAc;GAJpC,sBAAsB,CA2JlC"}

package/dist/modules/mcp/mcp.controller.d.ts

@@ -0,0 +1,15 @@
+import { AuthenticatedRequest } from '@n8n/db';
+import type { Response } from 'express';
+import { ErrorReporter } from 'n8n-core';
+import { McpService } from './mcp.service';
+import { McpSettingsService } from './mcp.settings.service';
+export type FlushableResponse = Response & {
+    flush: () => void;
+};
+export declare class McpController {
+    private readonly errorReporter;
+    private readonly mcpService;
+    private readonly mcpSettingsService;
+    constructor(errorReporter: ErrorReporter, mcpService: McpService, mcpSettingsService: McpSettingsService);
+    build(req: AuthenticatedRequest, res: FlushableResponse): Promise<void>;
+}

package/dist/modules/mcp/mcp.controller.js

@@ -0,0 +1,78 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpController = void 0;
+const streamableHttp_js_1 = require("@modelcontextprotocol/sdk/server/streamableHttp.js");
+const decorators_1 = require("@n8n/decorators");
+const di_1 = require("@n8n/di");
+const n8n_core_1 = require("n8n-core");
+const mcp_api_key_service_1 = require("./mcp-api-key.service");
+const mcp_service_1 = require("./mcp.service");
+const mcp_settings_service_1 = require("./mcp.settings.service");
+const getAuthMiddleware = () => di_1.Container.get(mcp_api_key_service_1.McpServerApiKeyService).getAuthMiddleware();
+let McpController = class McpController {
+    constructor(errorReporter, mcpService, mcpSettingsService) {
+        this.errorReporter = errorReporter;
+        this.mcpService = mcpService;
+        this.mcpSettingsService = mcpSettingsService;
+    }
+    async build(req, res) {
+        const enabled = await this.mcpSettingsService.getEnabled();
+        if (!enabled) {
+            res.status(403).json({ message: 'MCP access is disabled' });
+            return;
+        }
+        try {
+            const server = this.mcpService.getServer(req.user);
+            const transport = new streamableHttp_js_1.StreamableHTTPServerTransport({
+                sessionIdGenerator: undefined,
+            });
+            res.on('close', () => {
+                void transport.close();
+                void server.close();
+            });
+            await server.connect(transport);
+            await transport.handleRequest(req, res, req.body);
+        }
+        catch (error) {
+            this.errorReporter.error(error);
+            if (!res.headersSent) {
+                res.status(500).json({
+                    jsonrpc: '2.0',
+                    error: {
+                        code: -32603,
+                        message: 'Internal server error',
+                    },
+                    id: null,
+                });
+            }
+        }
+    }
+};
+exports.McpController = McpController;
+__decorate([
+    (0, decorators_1.Post)('/http', {
+        rateLimit: { limit: 100 },
+        middlewares: [getAuthMiddleware()],
+        skipAuth: true,
+        usesTemplates: true,
+    }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], McpController.prototype, "build", null);
+exports.McpController = McpController = __decorate([
+    (0, decorators_1.RootLevelController)('/mcp-access'),
+    __metadata("design:paramtypes", [n8n_core_1.ErrorReporter,
+        mcp_service_1.McpService,
+        mcp_settings_service_1.McpSettingsService])
+], McpController);
+//# sourceMappingURL=mcp.controller.js.map

package/dist/modules/mcp/mcp.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.controller.js","sourceRoot":"","sources":["../../../src/modules/mcp/mcp.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,0FAAmG;AAEnG,gDAA4D;AAC5D,gCAAoC;AAEpC,uCAAyC;AAEzC,+DAA+D;AAC/D,+CAA2C;AAC3C,iEAA4D;AAI5D,MAAM,iBAAiB,GAAG,GAAG,EAAE,CAAC,cAAS,CAAC,GAAG,CAAC,4CAAsB,CAAC,CAAC,iBAAiB,EAAE,CAAC;AAGnF,IAAM,aAAa,GAAnB,MAAM,aAAa;IACzB,YACkB,aAA4B,EAC5B,UAAsB,EACtB,kBAAsC;QAFtC,kBAAa,GAAb,aAAa,CAAe;QAC5B,eAAU,GAAV,UAAU,CAAY;QACtB,uBAAkB,GAAlB,kBAAkB,CAAoB;IACrD,CAAC;IAQE,AAAN,KAAK,CAAC,KAAK,CAAC,GAAyB,EAAE,GAAsB;QAE5D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,CAAC;QAC3D,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAC5D,OAAO;QACR,CAAC;QAID,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnD,MAAM,SAAS,GAAkC,IAAI,iDAA6B,CAAC;gBAClF,kBAAkB,EAAE,SAAS;aAC7B,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACpB,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC;gBACvB,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC,CAAC,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACpB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACN,IAAI,EAAE,CAAC,KAAK;wBACZ,OAAO,EAAE,uBAAuB;qBAChC;oBACD,EAAE,EAAE,IAAI;iBACR,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;IACF,CAAC;CACD,CAAA;AAhDY,sCAAa;AAanB;IANL,IAAA,iBAAI,EAAC,OAAO,EAAE;QACd,SAAS,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE;QACzB,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC;QAClC,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,IAAI;KACnB,CAAC;;;;0CAmCD;wBA/CW,aAAa;IADzB,IAAA,gCAAmB,EAAC,aAAa,CAAC;qCAGD,wBAAa;QAChB,wBAAU;QACF,yCAAkB;GAJ5C,aAAa,CAgDzB"}

package/dist/modules/mcp/mcp.module.d.ts

@@ -0,0 +1,8 @@
+import type { ModuleInterface } from '@n8n/decorators';
+export declare class McpModule implements ModuleInterface {
+    init(): Promise<void>;
+    settings(): Promise<{
+        mcpAccessEnabled: boolean;
+    }>;
+    shutdown(): Promise<void>;
+}

package/dist/modules/mcp/mcp.module.js

@@ -0,0 +1,70 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpModule = void 0;
+const decorators_1 = require("@n8n/decorators");
+const di_1 = require("@n8n/di");
+let McpModule = class McpModule {
+    async init() {
+        await Promise.resolve().then(() => __importStar(require('./mcp.controller')));
+        await Promise.resolve().then(() => __importStar(require('./mcp.settings.controller')));
+    }
+    async settings() {
+        const { McpSettingsService } = await Promise.resolve().then(() => __importStar(require('./mcp.settings.service')));
+        const mcpAccessEnabled = await di_1.Container.get(McpSettingsService).getEnabled();
+        return { mcpAccessEnabled };
+    }
+    async shutdown() { }
+};
+exports.McpModule = McpModule;
+__decorate([
+    (0, decorators_1.OnShutdown)(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], McpModule.prototype, "shutdown", null);
+exports.McpModule = McpModule = __decorate([
+    (0, decorators_1.BackendModule)({ name: 'mcp' })
+], McpModule);
+//# sourceMappingURL=mcp.module.js.map

package/dist/modules/mcp/mcp.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.module.js","sourceRoot":"","sources":["../../../src/modules/mcp/mcp.module.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,gDAA4D;AAC5D,gCAAoC;AAQ7B,IAAM,SAAS,GAAf,MAAM,SAAS;IACrB,KAAK,CAAC,IAAI;QACT,wDAAa,kBAAkB,GAAC,CAAC;QACjC,wDAAa,2BAA2B,GAAC,CAAC;IAC3C,CAAC;IAOD,KAAK,CAAC,QAAQ;QACb,MAAM,EAAE,kBAAkB,EAAE,GAAG,wDAAa,wBAAwB,GAAC,CAAC;QACtE,MAAM,gBAAgB,GAAG,MAAM,cAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,UAAU,EAAE,CAAC;QAC9E,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC7B,CAAC;IAGK,AAAN,KAAK,CAAC,QAAQ,KAAI,CAAC;CACnB,CAAA;AAnBY,8BAAS;AAkBf;IADL,IAAA,uBAAU,GAAE;;;;yCACM;oBAlBP,SAAS;IADrB,IAAA,0BAAa,EAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;GAClB,SAAS,CAmBrB"}

package/dist/modules/mcp/mcp.service.d.ts

@@ -0,0 +1,16 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { GlobalConfig } from '@n8n/config';
+import { User } from '@n8n/db';
+import { CredentialsService } from '../../credentials/credentials.service';
+import { UrlService } from '../../services/url.service';
+import { WorkflowFinderService } from '../../workflows/workflow-finder.service';
+import { WorkflowService } from '../../workflows/workflow.service';
+export declare class McpService {
+    private readonly workflowFinderService;
+    private readonly workflowService;
+    private readonly urlService;
+    private readonly credentialsService;
+    private readonly globalConfig;
+    constructor(workflowFinderService: WorkflowFinderService, workflowService: WorkflowService, urlService: UrlService, credentialsService: CredentialsService, globalConfig: GlobalConfig);
+    getServer(user: User): McpServer;
+}

package/dist/modules/mcp/mcp.service.js

@@ -0,0 +1,54 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpService = void 0;
+const mcp_js_1 = require("@modelcontextprotocol/sdk/server/mcp.js");
+const config_1 = require("@n8n/config");
+const di_1 = require("@n8n/di");
+const get_workflow_details_tool_1 = require("./tools/get-workflow-details.tool");
+const search_workflows_tool_1 = require("./tools/search-workflows.tool");
+const credentials_service_1 = require("../../credentials/credentials.service");
+const url_service_1 = require("../../services/url.service");
+const workflow_finder_service_1 = require("../../workflows/workflow-finder.service");
+const workflow_service_1 = require("../../workflows/workflow.service");
+let McpService = class McpService {
+    constructor(workflowFinderService, workflowService, urlService, credentialsService, globalConfig) {
+        this.workflowFinderService = workflowFinderService;
+        this.workflowService = workflowService;
+        this.urlService = urlService;
+        this.credentialsService = credentialsService;
+        this.globalConfig = globalConfig;
+    }
+    getServer(user) {
+        const server = new mcp_js_1.McpServer({
+            name: 'n8n MCP Server',
+            version: '1.0.0',
+        });
+        const workflowSearchTool = (0, search_workflows_tool_1.createSearchWorkflowsTool)(user, this.workflowService);
+        server.registerTool(workflowSearchTool.name, workflowSearchTool.config, workflowSearchTool.handler);
+        const workflowDetailsTool = (0, get_workflow_details_tool_1.createWorkflowDetailsTool)(user, this.urlService.getWebhookBaseUrl(), this.workflowFinderService, this.credentialsService, {
+            webhook: this.globalConfig.endpoints.webhook,
+            webhookTest: this.globalConfig.endpoints.webhookTest,
+        });
+        server.registerTool(workflowDetailsTool.name, workflowDetailsTool.config, workflowDetailsTool.handler);
+        return server;
+    }
+};
+exports.McpService = McpService;
+exports.McpService = McpService = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [workflow_finder_service_1.WorkflowFinderService,
+        workflow_service_1.WorkflowService,
+        url_service_1.UrlService,
+        credentials_service_1.CredentialsService,
+        config_1.GlobalConfig])
+], McpService);
+//# sourceMappingURL=mcp.service.js.map

package/dist/modules/mcp/mcp.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.service.js","sourceRoot":"","sources":["../../../src/modules/mcp/mcp.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oEAAoE;AACpE,wCAA2C;AAE3C,gCAAkC;AAElC,iFAA8E;AAC9E,yEAA0E;AAE1E,2EAAuE;AACvE,wDAAoD;AACpD,iFAA4E;AAC5E,mEAA+D;AAGxD,IAAM,UAAU,GAAhB,MAAM,UAAU;IACtB,YACkB,qBAA4C,EAC5C,eAAgC,EAChC,UAAsB,EACtB,kBAAsC,EACtC,YAA0B;QAJ1B,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,oBAAe,GAAf,eAAe,CAAiB;QAChC,eAAU,GAAV,UAAU,CAAY;QACtB,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,iBAAY,GAAZ,YAAY,CAAc;IACzC,CAAC;IAEJ,SAAS,CAAC,IAAU;QACnB,MAAM,MAAM,GAAG,IAAI,kBAAS,CAAC;YAC5B,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,OAAO;SAChB,CAAC,CAAC;QAEH,MAAM,kBAAkB,GAAG,IAAA,iDAAyB,EAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QACjF,MAAM,CAAC,YAAY,CAClB,kBAAkB,CAAC,IAAI,EACvB,kBAAkB,CAAC,MAAM,EACzB,kBAAkB,CAAC,OAAO,CAC1B,CAAC;QAEF,MAAM,mBAAmB,GAAG,IAAA,qDAAyB,EACpD,IAAI,EACJ,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,EACnC,IAAI,CAAC,qBAAqB,EAC1B,IAAI,CAAC,kBAAkB,EACvB;YACC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO;YAC5C,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,WAAW;SACpD,CACD,CAAC;QACF,MAAM,CAAC,YAAY,CAClB,mBAAmB,CAAC,IAAI,EACxB,mBAAmB,CAAC,MAAM,EAC1B,mBAAmB,CAAC,OAAO,CAC3B,CAAC;QAEF,OAAO,MAAM,CAAC;IACf,CAAC;CACD,CAAA;AAxCY,gCAAU;qBAAV,UAAU;IADtB,IAAA,YAAO,GAAE;qCAGgC,+CAAqB;QAC3B,kCAAe;QACpB,wBAAU;QACF,wCAAkB;QACxB,qBAAY;GANhC,UAAU,CAwCtB"}

package/dist/modules/mcp/mcp.settings.controller.d.ts

@@ -0,0 +1,17 @@
+import { ModuleRegistry, Logger } from '@n8n/backend-common';
+import { type AuthenticatedRequest } from '@n8n/db';
+import { UpdateMcpSettingsDto } from './dto/update-mcp-settings.dto';
+import { McpServerApiKeyService } from './mcp-api-key.service';
+import { McpSettingsService } from './mcp.settings.service';
+export declare class McpSettingsController {
+    private readonly mcpSettingsService;
+    private readonly logger;
+    private readonly moduleRegistry;
+    private readonly mcpServerApiKeyService;
+    constructor(mcpSettingsService: McpSettingsService, logger: Logger, moduleRegistry: ModuleRegistry, mcpServerApiKeyService: McpServerApiKeyService);
+    updateSettings(_req: AuthenticatedRequest, _res: Response, dto: UpdateMcpSettingsDto): Promise<{
+        mcpAccessEnabled: boolean;
+    }>;
+    getApiKeyForMcpServer(req: AuthenticatedRequest): Promise<import("@n8n/db").ApiKey>;
+    rotateApiKeyForMcpServer(req: AuthenticatedRequest): Promise<import("@n8n/db").ApiKey>;
+}

package/dist/modules/mcp/mcp.settings.controller.js

@@ -0,0 +1,79 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpSettingsController = void 0;
+const backend_common_1 = require("@n8n/backend-common");
+const decorators_1 = require("@n8n/decorators");
+const update_mcp_settings_dto_1 = require("./dto/update-mcp-settings.dto");
+const mcp_api_key_service_1 = require("./mcp-api-key.service");
+const mcp_settings_service_1 = require("./mcp.settings.service");
+let McpSettingsController = class McpSettingsController {
+    constructor(mcpSettingsService, logger, moduleRegistry, mcpServerApiKeyService) {
+        this.mcpSettingsService = mcpSettingsService;
+        this.logger = logger;
+        this.moduleRegistry = moduleRegistry;
+        this.mcpServerApiKeyService = mcpServerApiKeyService;
+    }
+    async updateSettings(_req, _res, dto) {
+        const enabled = dto.mcpAccessEnabled;
+        await this.mcpSettingsService.setEnabled(enabled);
+        try {
+            await this.moduleRegistry.refreshModuleSettings('mcp');
+        }
+        catch (error) {
+            this.logger.warn('Failed to sync MCP settings to module registry', {
+                cause: error instanceof Error ? error.message : String(error),
+            });
+        }
+        return { mcpAccessEnabled: enabled };
+    }
+    async getApiKeyForMcpServer(req) {
+        return await this.mcpServerApiKeyService.getOrCreateApiKey(req.user);
+    }
+    async rotateApiKeyForMcpServer(req) {
+        return await this.mcpServerApiKeyService.rotateMcpServerApiKey(req.user);
+    }
+};
+exports.McpSettingsController = McpSettingsController;
+__decorate([
+    (0, decorators_1.GlobalScope)('mcp:manage'),
+    (0, decorators_1.Patch)('/settings'),
+    __param(2, decorators_1.Body),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Response,
+        update_mcp_settings_dto_1.UpdateMcpSettingsDto]),
+    __metadata("design:returntype", Promise)
+], McpSettingsController.prototype, "updateSettings", null);
+__decorate([
+    (0, decorators_1.GlobalScope)('mcpApiKey:create'),
+    (0, decorators_1.Get)('/api-key'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], McpSettingsController.prototype, "getApiKeyForMcpServer", null);
+__decorate([
+    (0, decorators_1.GlobalScope)('mcpApiKey:rotate'),
+    (0, decorators_1.Post)('/api-key/rotate'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], McpSettingsController.prototype, "rotateApiKeyForMcpServer", null);
+exports.McpSettingsController = McpSettingsController = __decorate([
+    (0, decorators_1.RestController)('/mcp'),
+    __metadata("design:paramtypes", [mcp_settings_service_1.McpSettingsService,
+        backend_common_1.Logger,
+        backend_common_1.ModuleRegistry,
+        mcp_api_key_service_1.McpServerApiKeyService])
+], McpSettingsController);
+//# sourceMappingURL=mcp.settings.controller.js.map

package/dist/modules/mcp/mcp.settings.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.settings.controller.js","sourceRoot":"","sources":["../../../src/modules/mcp/mcp.settings.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,wDAA6D;AAE7D,gDAAsF;AAEtF,2EAAqE;AACrE,+DAA+D;AAC/D,iEAA4D;AAGrD,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IACjC,YACkB,kBAAsC,EACtC,MAAc,EACd,cAA8B,EAC9B,sBAA8C;QAH9C,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,WAAM,GAAN,MAAM,CAAQ;QACd,mBAAc,GAAd,cAAc,CAAgB;QAC9B,2BAAsB,GAAtB,sBAAsB,CAAwB;IAC7D,CAAC;IAIE,AAAN,KAAK,CAAC,cAAc,CACnB,IAA0B,EAC1B,IAAc,EACR,GAAyB;QAE/B,MAAM,OAAO,GAAG,GAAG,CAAC,gBAAgB,CAAC;QACrC,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gDAAgD,EAAE;gBAClE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC;IACtC,CAAC;IAIK,AAAN,KAAK,CAAC,qBAAqB,CAAC,GAAyB;QACpD,OAAO,MAAM,IAAI,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC;IAIK,AAAN,KAAK,CAAC,wBAAwB,CAAC,GAAyB;QACvD,OAAO,MAAM,IAAI,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1E,CAAC;CACD,CAAA;AAtCY,sDAAqB;AAU3B;IAFL,IAAA,wBAAW,EAAC,YAAY,CAAC;IACzB,IAAA,kBAAK,EAAC,WAAW,CAAC;IAIjB,WAAA,iBAAI,CAAA;;6CADC,QAAQ;QACH,8CAAoB;;2DAY/B;AAIK;IAFL,IAAA,wBAAW,EAAC,kBAAkB,CAAC;IAC/B,IAAA,gBAAG,EAAC,UAAU,CAAC;;;;kEAGf;AAIK;IAFL,IAAA,wBAAW,EAAC,kBAAkB,CAAC;IAC/B,IAAA,iBAAI,EAAC,iBAAiB,CAAC;;;;qEAGvB;gCArCW,qBAAqB;IADjC,IAAA,2BAAc,EAAC,MAAM,CAAC;qCAGgB,yCAAkB;QAC9B,uBAAM;QACE,+BAAc;QACN,4CAAsB;GALpD,qBAAqB,CAsCjC"}

package/dist/modules/mcp/mcp.settings.service.d.ts

@@ -0,0 +1,9 @@
+import { SettingsRepository } from '@n8n/db';
+import { CacheService } from '../../services/cache/cache.service';
+export declare class McpSettingsService {
+    private readonly settingsRepository;
+    private readonly cacheService;
+    constructor(settingsRepository: SettingsRepository, cacheService: CacheService);
+    getEnabled(): Promise<boolean>;
+    setEnabled(enabled: boolean): Promise<void>;
+}

package/dist/modules/mcp/mcp.settings.service.js

@@ -0,0 +1,43 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpSettingsService = void 0;
+const db_1 = require("@n8n/db");
+const di_1 = require("@n8n/di");
+const cache_service_1 = require("../../services/cache/cache.service");
+const KEY = 'mcp.access.enabled';
+let McpSettingsService = class McpSettingsService {
+    constructor(settingsRepository, cacheService) {
+        this.settingsRepository = settingsRepository;
+        this.cacheService = cacheService;
+    }
+    async getEnabled() {
+        const isMcpAccessEnabled = await this.cacheService.get(KEY);
+        if (isMcpAccessEnabled !== undefined) {
+            return isMcpAccessEnabled === 'true';
+        }
+        const row = await this.settingsRepository.findByKey(KEY);
+        const enabled = row?.value === 'true';
+        await this.cacheService.set(KEY, enabled.toString());
+        return enabled;
+    }
+    async setEnabled(enabled) {
+        await this.settingsRepository.upsert({ key: KEY, value: enabled.toString(), loadOnStartup: true }, ['key']);
+        await this.cacheService.set(KEY, enabled.toString());
+    }
+};
+exports.McpSettingsService = McpSettingsService;
+exports.McpSettingsService = McpSettingsService = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [db_1.SettingsRepository,
+        cache_service_1.CacheService])
+], McpSettingsService);
+//# sourceMappingURL=mcp.settings.service.js.map

package/dist/modules/mcp/mcp.settings.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.settings.service.js","sourceRoot":"","sources":["../../../src/modules/mcp/mcp.settings.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gCAA6C;AAC7C,gCAAkC;AAElC,kEAA8D;AAE9D,MAAM,GAAG,GAAG,oBAAoB,CAAC;AAG1B,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAC9B,YACkB,kBAAsC,EACtC,YAA0B;QAD1B,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,iBAAY,GAAZ,YAAY,CAAc;IACzC,CAAC;IAEJ,KAAK,CAAC,UAAU;QACf,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAS,GAAG,CAAC,CAAC;QAEpE,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,kBAAkB,KAAK,MAAM,CAAC;QACtC,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAEzD,MAAM,OAAO,GAAG,GAAG,EAAE,KAAK,KAAK,MAAM,CAAC;QAEtC,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAErD,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAgB;QAChC,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CACnC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,EAC5D,CAAC,KAAK,CAAC,CACP,CAAC;QAEF,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtD,CAAC;CACD,CAAA;AA9BY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,YAAO,GAAE;qCAG6B,uBAAkB;QACxB,4BAAY;GAHhC,kBAAkB,CA8B9B"}

package/dist/modules/mcp/mcp.typeguards.d.ts

@@ -0,0 +1,21 @@
+type UnknownRecord = Record<string, unknown>;
+export type HttpHeaderAuthDecryptedData = {
+    name: string;
+    value?: unknown;
+};
+export type WithDecryptedData<T> = UnknownRecord & {
+    data: T;
+};
+export declare function hasHttpHeaderAuthDecryptedData(value: unknown): value is WithDecryptedData<HttpHeaderAuthDecryptedData>;
+export type JwtPassphraseDecryptedData = {
+    keyType?: 'passphrase' | string;
+    secret: string;
+};
+export type JwtPemKeyDecryptedData = {
+    keyType?: 'pemKey' | string;
+    privateKey?: string;
+    publicKey?: string;
+};
+export declare function hasJwtSecretDecryptedData(value: unknown): value is WithDecryptedData<JwtPassphraseDecryptedData>;
+export declare function hasJwtPemKeyDecryptedData(value: unknown): value is WithDecryptedData<JwtPemKeyDecryptedData>;
+export {};