n8n 2.26.4 → 2.27.0

package/dist/modules/instance-ai/suspended-thread-persistence.service.d.ts

@@ -0,0 +1,51 @@
+import type { Logger } from '@n8n/backend-common';
+import type { InstanceAiConfig } from '@n8n/config';
+import type { AgentDbMessage } from '@n8n/instance-ai';
+import type { DeepPartial } from '@n8n/typeorm';
+import type { InstanceAiPendingConfirmation } from './entities/instance-ai-pending-confirmation.entity';
+export interface PendingConfirmationStore {
+    create(entityLike: DeepPartial<InstanceAiPendingConfirmation>): InstanceAiPendingConfirmation;
+    save(entity: InstanceAiPendingConfirmation): Promise<InstanceAiPendingConfirmation>;
+    deleteByRequestId(requestId: string): Promise<number>;
+    deleteByThreadId(threadId: string): Promise<number>;
+    deleteExpired(now: Date): Promise<number>;
+}
+export interface UserMessageStore {
+    saveMessages(args: {
+        threadId: string;
+        resourceId: string;
+        messages: AgentDbMessage[];
+    }): Promise<void>;
+}
+export interface SuspendedThreadPersistenceServiceOptions {
+    logger: Logger;
+    config: Pick<InstanceAiConfig, 'confirmationTimeout'>;
+    pendingConfirmationRepo: PendingConfirmationStore;
+    agentMemory: UserMessageStore;
+}
+export declare class SuspendedThreadPersistenceService {
+    private readonly logger;
+    private readonly config;
+    private readonly pendingConfirmationRepo;
+    private readonly agentMemory;
+    constructor(options: SuspendedThreadPersistenceServiceOptions);
+    pruneStalePendingConfirmations(now: number): Promise<void>;
+    private computePendingConfirmationExpiresAt;
+    persistPendingConfirmation(params: {
+        requestId: string;
+        threadId: string;
+        userId: string;
+        runId: string;
+        messageGroupId?: string;
+        kind: 'inline' | 'suspended';
+        toolCallId?: string;
+        checkpointKey?: string;
+        checkpointTaskId?: string;
+    }): Promise<void>;
+    dropPendingConfirmation(requestId: string): Promise<void>;
+    dropPendingConfirmationsForThread(threadId: string): Promise<void>;
+    persistUserMessageOnSuspend(threadId: string, userId: string, message: {
+        id: string;
+        text: string;
+    }): Promise<boolean>;
+}

package/dist/modules/instance-ai/suspended-thread-persistence.service.js

@@ -0,0 +1,106 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SuspendedThreadPersistenceService = void 0;
+function getErrorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+class SuspendedThreadPersistenceService {
+    constructor(options) {
+        this.logger = options.logger;
+        this.config = options.config;
+        this.pendingConfirmationRepo = options.pendingConfirmationRepo;
+        this.agentMemory = options.agentMemory;
+    }
+    async pruneStalePendingConfirmations(now) {
+        try {
+            const count = await this.pendingConfirmationRepo.deleteExpired(new Date(now));
+            if (count === 0) {
+                this.logger.debug('No stale Instance AI pending confirmations to drop');
+                return;
+            }
+            this.logger.info('Dropped stale Instance AI pending confirmations', { count });
+        }
+        catch (error) {
+            this.logger.warn('Failed to drop stale Instance AI pending confirmations', {
+                error: getErrorMessage(error),
+            });
+        }
+    }
+    computePendingConfirmationExpiresAt() {
+        const timeoutMs = this.config.confirmationTimeout;
+        return timeoutMs > 0 ? new Date(Date.now() + timeoutMs) : null;
+    }
+    async persistPendingConfirmation(params) {
+        try {
+            await this.pendingConfirmationRepo.save(this.pendingConfirmationRepo.create({
+                requestId: params.requestId,
+                threadId: params.threadId,
+                userId: params.userId,
+                kind: params.kind,
+                runId: params.runId,
+                messageGroupId: params.messageGroupId ?? null,
+                toolCallId: params.toolCallId ?? null,
+                checkpointKey: params.checkpointKey ?? null,
+                checkpointTaskId: params.checkpointTaskId ?? null,
+                expiresAt: this.computePendingConfirmationExpiresAt(),
+            }));
+        }
+        catch (error) {
+            this.logger.warn('Failed to persist pending confirmation', {
+                requestId: params.requestId,
+                threadId: params.threadId,
+                kind: params.kind,
+                error: getErrorMessage(error),
+            });
+        }
+    }
+    async dropPendingConfirmation(requestId) {
+        try {
+            await this.pendingConfirmationRepo.deleteByRequestId(requestId);
+        }
+        catch (error) {
+            this.logger.warn('Failed to drop pending confirmation', {
+                requestId,
+                error: getErrorMessage(error),
+            });
+        }
+    }
+    async dropPendingConfirmationsForThread(threadId) {
+        try {
+            await this.pendingConfirmationRepo.deleteByThreadId(threadId);
+        }
+        catch (error) {
+            this.logger.warn('Failed to drop pending confirmations for thread', {
+                threadId,
+                error: getErrorMessage(error),
+            });
+        }
+    }
+    async persistUserMessageOnSuspend(threadId, userId, message) {
+        try {
+            await this.agentMemory.saveMessages({
+                threadId,
+                resourceId: userId,
+                messages: [
+                    {
+                        id: message.id,
+                        role: 'user',
+                        content: [{ type: 'text', text: message.text }],
+                        createdAt: new Date(),
+                    },
+                ],
+            });
+            return true;
+        }
+        catch (error) {
+            this.logger.warn('Failed to persist user message on HITL suspend', {
+                threadId,
+                userId,
+                error: getErrorMessage(error),
+            });
+            return false;
+        }
+    }
+}
+exports.SuspendedThreadPersistenceService = SuspendedThreadPersistenceService;
+//# sourceMappingURL=suspended-thread-persistence.service.js.map

package/dist/modules/instance-ai/suspended-thread-persistence.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"suspended-thread-persistence.service.js","sourceRoot":"","sources":["../../../src/modules/instance-ai/suspended-thread-persistence.service.ts"],"names":[],"mappings":";;;AAOA,SAAS,eAAe,CAAC,KAAc;IACtC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AA6CD,MAAa,iCAAiC;IAS7C,YAAY,OAAiD;QAC5D,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,CAAC;QAC/D,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,8BAA8B,CAAC,GAAW;QAC/C,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9E,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBACjB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;gBACxE,OAAO;YACR,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iDAAiD,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wDAAwD,EAAE;gBAC1E,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC;aAC7B,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAEO,mCAAmC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC;QAClD,OAAO,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,CAAC;IAQD,KAAK,CAAC,0BAA0B,CAAC,MAUhC;QACA,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,CACtC,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC;gBACnC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,IAAI;gBAC7C,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;gBACrC,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,IAAI;gBAC3C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,IAAI;gBACjD,SAAS,EAAE,IAAI,CAAC,mCAAmC,EAAE;aACrD,CAAC,CACF,CAAC;QACH,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;gBAC1D,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC;aAC7B,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,SAAiB;QAC9C,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;gBACvD,SAAS;gBACT,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC;aAC7B,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,KAAK,CAAC,iCAAiC,CAAC,QAAgB;QACvD,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,uBAAuB,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iDAAiD,EAAE;gBACnE,QAAQ;gBACR,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC;aAC7B,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAUD,KAAK,CAAC,2BAA2B,CAChC,QAAgB,EAChB,MAAc,EACd,OAAqC;QAErC,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC;gBACnC,QAAQ;gBACR,UAAU,EAAE,MAAM;gBAClB,QAAQ,EAAE;oBACT;wBACC,EAAE,EAAE,OAAO,CAAC,EAAE;wBACd,IAAI,EAAE,MAAM;wBACZ,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;wBAC/C,SAAS,EAAE,IAAI,IAAI,EAAE;qBACrB;iBACD;aACD,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACb,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gDAAgD,EAAE;gBAClE,QAAQ;gBACR,MAAM;gBACN,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC;aAC7B,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;CACD;AAxID,8EAwIC"}

package/dist/modules/instance-ai/web-research/fetch-and-extract.d.ts

@@ -1,5 +1,5 @@
+import type { SsrfBridge } from '@n8n/backend-network';
 import type { FetchedPage } from '@n8n/instance-ai';
-import type { SsrfBridge } from 'n8n-core';
 export interface FetchAndExtractOptions {
     maxContentLength?: number;
     maxResponseBytes?: number;

package/dist/modules/mcp/mcp-api-key.service.d.ts

@@ -1,22 +1,18 @@
-import { ApiKey, ApiKeyRepository, User, UserRepository } from '@n8n/db';
+import { ApiKey, ApiKeyRepository, User } from '@n8n/db';
 import { EntityManager } from '@n8n/typeorm';
 import { AuthStrategyRegistry } from '../../services/auth-strategy.registry';
 import { JwtService } from '../../services/jwt.service';
-import { AccessTokenRepository } from './database/repositories/oauth-access-token.repository';
-import { UserWithContext } from './mcp.types';
+import { UserWithContext } from '../../services/oauth-token-verifier-proxy.service';
 export declare class McpServerApiKeyService {
     private readonly apiKeyRepository;
     private readonly jwtService;
-    private readonly userRepository;
-    private readonly accessTokenRepository;
     private readonly authStrategyRegistry;
-    constructor(apiKeyRepository: ApiKeyRepository, jwtService: JwtService, userRepository: UserRepository, accessTokenRepository: AccessTokenRepository, authStrategyRegistry: AuthStrategyRegistry);
+    constructor(apiKeyRepository: ApiKeyRepository, jwtService: JwtService, authStrategyRegistry: AuthStrategyRegistry);
     createMcpServerApiKey(user: User, trx?: EntityManager): Promise<ApiKey>;
     findServerApiKeyForUser(user: User, { redact }?: {
         redact?: boolean | undefined;
     }): Promise<ApiKey | null>;
     verifyApiKey(apiKey: string): Promise<UserWithContext>;
-    getUserForAccessToken(token: string): Promise<User | null>;
     deleteAllMcpApiKeysForUser(user: User, trx?: EntityManager): Promise<void>;
     private redactApiKey;
     getOrCreateApiKey(user: User): Promise<ApiKey>;

package/dist/modules/mcp/mcp-api-key.service.js

@@ -16,7 +16,6 @@ const crypto_1 = require("crypto");
 const n8n_workflow_1 = require("n8n-workflow");
 const auth_strategy_registry_1 = require("../../services/auth-strategy.registry");
 const jwt_service_1 = require("../../services/jwt.service");
-const oauth_access_token_repository_1 = require("./database/repositories/oauth-access-token.repository");
 const API_KEY_AUDIENCE = 'mcp-server-api';
 const API_KEY_ISSUER = 'n8n';
 const REDACT_API_KEY_REVEAL_COUNT = 4;
@@ -24,11 +23,9 @@ const REDACT_API_KEY_MAX_LENGTH = 10;
 const API_KEY_LABEL = 'MCP Server API Key';
 const REDACT_API_KEY_MIN_HIDDEN_CHARS = 6;
 let McpServerApiKeyService = class McpServerApiKeyService {
-    constructor(apiKeyRepository, jwtService, userRepository, accessTokenRepository, authStrategyRegistry) {
+    constructor(apiKeyRepository, jwtService, authStrategyRegistry) {
         this.apiKeyRepository = apiKeyRepository;
         this.jwtService = jwtService;
-        this.userRepository = userRepository;
-        this.accessTokenRepository = accessTokenRepository;
         this.authStrategyRegistry = authStrategyRegistry;
     }
     async createMcpServerApiKey(user, trx) {
@@ -93,22 +90,6 @@ let McpServerApiKeyService = class McpServerApiKeyService {
             };
         }
     }
-    async getUserForAccessToken(token) {
-        const accessToken = await this.accessTokenRepository.findOne({
-            where: {
-                token,
-            },
-        });
-        if (!accessToken) {
-            return null;
-        }
-        return await this.userRepository.findOne({
-            where: {
-                id: accessToken.userId,
-            },
-            relations: ['role'],
-        });
-    }
     async deleteAllMcpApiKeysForUser(user, trx) {
         const manager = trx ?? this.apiKeyRepository.manager;
         await manager.delete(db_1.ApiKey, {
@@ -149,8 +130,6 @@ exports.McpServerApiKeyService = McpServerApiKeyService = __decorate([
     (0, di_1.Service)(),
     __metadata("design:paramtypes", [db_1.ApiKeyRepository,
         jwt_service_1.JwtService,
-        db_1.UserRepository,
-        oauth_access_token_repository_1.AccessTokenRepository,
         auth_strategy_registry_1.AuthStrategyRegistry])
 ], McpServerApiKeyService);
 //# sourceMappingURL=mcp-api-key.service.js.map

package/dist/modules/mcp/mcp-api-key.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-api-key.service.js","sourceRoot":"","sources":["../../../src/modules/mcp/mcp-api-key.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gCAAyE;AACzE,gCAAkC;AAElC,mCAAoC;AACpC,+CAA2D;AAE3D,8EAAyE;AACzE,wDAAoD;AAEpD,yGAA8F;AAG9F,MAAM,gBAAgB,GAAmB,gBAAgB,CAAC;AAC1D,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,2BAA2B,GAAG,CAAC,CAAC;AACtC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AACrC,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAC3C,MAAM,+BAA+B,GAAG,CAAC,CAAC;AAMnC,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;IAClC,YACkB,gBAAkC,EAClC,UAAsB,EACtB,cAA8B,EAC9B,qBAA4C,EAC5C,oBAA0C;QAJ1C,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,eAAU,GAAV,UAAU,CAAY;QACtB,mBAAc,GAAd,cAAc,CAAgB;QAC9B,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,yBAAoB,GAApB,oBAAoB,CAAsB;IACzD,CAAC;IAEJ,KAAK,CAAC,qBAAqB,CAAC,IAAU,EAAE,GAAmB;QAC1D,MAAM,OAAO,GAAG,GAAG,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;QAErD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YACnC,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,GAAG,EAAE,cAAc;YACnB,GAAG,EAAE,gBAAgB;YACrB,GAAG,EAAE,IAAA,mBAAU,GAAE;SACjB,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;YACjD,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,MAAM;YACN,QAAQ,EAAE,gBAAgB;YAC1B,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,aAAa;SACpB,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,MAAM,CAAC,WAAM,EAAE,YAAY,CAAC,CAAC;QAE3C,OAAO,MAAM,OAAO,CAAC,eAAe,CAAC,WAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,IAAU,EAAE,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,EAAE;QAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YAClD,KAAK,EAAE;gBACN,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,gBAAgB;aAC1B;SACD,CAAC,CAAC;QAEH,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;YACtB,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,MAAM,CAAC;IACf,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc;QAChC,IAAI,CAAC;YACJ,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,qBAAqB,CAAC,MAAM,EAAE;gBAChF,QAAQ,EAAE,gBAAgB;aAC1B,CAAC,CAAC;YAEH,IAAI,UAAU,EAAE,CAAC;gBAChB,OAAO;oBACN,IAAI,EAAE,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,OAAO;oBAC5C,KAAK,EAAE,UAAU,CAAC,KAAK;oBACvB,QAAQ,EAAE,SAAS;iBACnB,CAAC;YACH,CAAC;YAED,OAAO;gBACN,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE;oBACR,MAAM,EAAE,eAAe;oBACvB,SAAS,EAAE,SAAS;iBACpB;aACD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,YAAY,GAAG,IAAA,0BAAW,EAAC,KAAK,CAAC,CAAC;YACxC,OAAO;gBACN,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE;oBACR,MAAM,EAAE,YAAY,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe;oBACrF,SAAS,EAAE,SAAS;oBACpB,aAAa,EAAE,YAAY,CAAC,OAAO;iBACnC;aACD,CAAC;QACH,CAAC;IACF,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,KAAa;QACxC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC;YAC5D,KAAK,EAAE;gBACN,KAAK;aACL;SACD,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACb,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YACxC,KAAK,EAAE;gBACN,EAAE,EAAE,WAAW,CAAC,MAAM;aACtB;YACD,SAAS,EAAE,CAAC,MAAM,CAAC;SACnB,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,IAAU,EAAE,GAAmB;QAC/D,MAAM,OAAO,GAAG,GAAG,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;QAErD,MAAM,OAAO,CAAC,MAAM,CAAC,WAAM,EAAE;YAC5B,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,QAAQ,EAAE,gBAAgB;SAC1B,CAAC,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,MAAc;QAClC,IAAI,2BAA2B,IAAI,MAAM,CAAC,MAAM,GAAG,+BAA+B,EAAE,CAAC;YACpF,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,2BAA2B,CAAC,CAAC;QAC/D,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAC9B,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,yBAAyB,GAAG,2BAA2B,CAAC,CACpE,CAAC;QAEF,OAAO,YAAY,GAAG,WAAW,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,IAAU;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YAClD,KAAK,EAAE;gBACN,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,gBAAgB;aAC1B;SACD,CAAC,CAAC;QAEH,IAAI,MAAM,EAAE,CAAC;YACZ,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACjD,OAAO,MAAM,CAAC;QACf,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,IAAU;QACrC,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACpE,MAAM,IAAI,CAAC,0BAA0B,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACjD,OAAO,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACJ,CAAC;CACD,CAAA;AAhJY,wDAAsB;iCAAtB,sBAAsB;IADlC,IAAA,YAAO,GAAE;qCAG2B,qBAAgB;QACtB,wBAAU;QACN,mBAAc;QACP,qDAAqB;QACtB,6CAAoB;GANhD,sBAAsB,CAgJlC"}
+{"version":3,"file":"mcp-api-key.service.js","sourceRoot":"","sources":["../../../src/modules/mcp/mcp-api-key.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gCAAyD;AACzD,gCAAkC;AAElC,mCAAoC;AACpC,+CAA2D;AAE3D,8EAAyE;AACzE,wDAAoD;AAGpD,MAAM,gBAAgB,GAAmB,gBAAgB,CAAC;AAC1D,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,2BAA2B,GAAG,CAAC,CAAC;AACtC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AACrC,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAC3C,MAAM,+BAA+B,GAAG,CAAC,CAAC;AAMnC,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;IAClC,YACkB,gBAAkC,EAClC,UAAsB,EACtB,oBAA0C;QAF1C,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,eAAU,GAAV,UAAU,CAAY;QACtB,yBAAoB,GAApB,oBAAoB,CAAsB;IACzD,CAAC;IAEJ,KAAK,CAAC,qBAAqB,CAAC,IAAU,EAAE,GAAmB;QAC1D,MAAM,OAAO,GAAG,GAAG,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;QAErD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YACnC,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,GAAG,EAAE,cAAc;YACnB,GAAG,EAAE,gBAAgB;YACrB,GAAG,EAAE,IAAA,mBAAU,GAAE;SACjB,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;YACjD,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,MAAM;YACN,QAAQ,EAAE,gBAAgB;YAC1B,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,aAAa;SACpB,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,MAAM,CAAC,WAAM,EAAE,YAAY,CAAC,CAAC;QAE3C,OAAO,MAAM,OAAO,CAAC,eAAe,CAAC,WAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,IAAU,EAAE,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,EAAE;QAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YAClD,KAAK,EAAE;gBACN,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,gBAAgB;aAC1B;SACD,CAAC,CAAC;QAEH,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;YACtB,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,MAAM,CAAC;IACf,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc;QAChC,IAAI,CAAC;YACJ,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,qBAAqB,CAAC,MAAM,EAAE;gBAChF,QAAQ,EAAE,gBAAgB;aAC1B,CAAC,CAAC;YAEH,IAAI,UAAU,EAAE,CAAC;gBAChB,OAAO;oBACN,IAAI,EAAE,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,OAAO;oBAC5C,KAAK,EAAE,UAAU,CAAC,KAAK;oBACvB,QAAQ,EAAE,SAAS;iBACnB,CAAC;YACH,CAAC;YAED,OAAO;gBACN,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE;oBACR,MAAM,EAAE,eAAe;oBACvB,SAAS,EAAE,SAAS;iBACpB;aACD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,YAAY,GAAG,IAAA,0BAAW,EAAC,KAAK,CAAC,CAAC;YACxC,OAAO;gBACN,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE;oBACR,MAAM,EAAE,YAAY,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe;oBACrF,SAAS,EAAE,SAAS;oBACpB,aAAa,EAAE,YAAY,CAAC,OAAO;iBACnC;aACD,CAAC;QACH,CAAC;IACF,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,IAAU,EAAE,GAAmB;QAC/D,MAAM,OAAO,GAAG,GAAG,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;QAErD,MAAM,OAAO,CAAC,MAAM,CAAC,WAAM,EAAE;YAC5B,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,QAAQ,EAAE,gBAAgB;SAC1B,CAAC,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,MAAc;QAClC,IAAI,2BAA2B,IAAI,MAAM,CAAC,MAAM,GAAG,+BAA+B,EAAE,CAAC;YACpF,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,2BAA2B,CAAC,CAAC;QAC/D,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAC9B,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,yBAAyB,GAAG,2BAA2B,CAAC,CACpE,CAAC;QAEF,OAAO,YAAY,GAAG,WAAW,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,IAAU;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YAClD,KAAK,EAAE;gBACN,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,gBAAgB;aAC1B;SACD,CAAC,CAAC;QAEH,IAAI,MAAM,EAAE,CAAC;YACZ,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACjD,OAAO,MAAM,CAAC;QACf,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,IAAU;QACrC,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACpE,MAAM,IAAI,CAAC,0BAA0B,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACjD,OAAO,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACJ,CAAC;CACD,CAAA;AA3HY,wDAAsB;iCAAtB,sBAAsB;IADlC,IAAA,YAAO,GAAE;qCAG2B,qBAAgB;QACtB,wBAAU;QACA,6CAAoB;GAJhD,sBAAsB,CA2HlC"}

package/dist/modules/mcp/mcp-protected-resource.d.ts

@@ -0,0 +1,13 @@
+import type { ProtectedResource } from '../../services/protected-resource.registry';
+import { UrlService } from '../../services/url.service';
+export declare const INSTANCE_MCP_RESOURCE_ID = "instance-mcp";
+export declare const SUPPORTED_SCOPES: string[];
+export declare class McpProtectedResource implements ProtectedResource {
+    private readonly urlService;
+    readonly id = "instance-mcp";
+    readonly scopes: string[];
+    readonly isDefault = true;
+    constructor(urlService: UrlService);
+    getResourceUrl(): string;
+    getAudiences(): string[];
+}

package/dist/modules/mcp/mcp-protected-resource.js

@@ -0,0 +1,39 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpProtectedResource = exports.SUPPORTED_SCOPES = exports.INSTANCE_MCP_RESOURCE_ID = void 0;
+const di_1 = require("@n8n/di");
+const url_service_1 = require("../../services/url.service");
+exports.INSTANCE_MCP_RESOURCE_ID = 'instance-mcp';
+exports.SUPPORTED_SCOPES = ['tool:listWorkflows', 'tool:getWorkflowDetails'];
+const MCP_RESOURCE_PATH = '/mcp-server/http';
+const LEGACY_MCP_AUDIENCE = 'mcp-server-api';
+let McpProtectedResource = class McpProtectedResource {
+    constructor(urlService) {
+        this.urlService = urlService;
+        this.id = exports.INSTANCE_MCP_RESOURCE_ID;
+        this.scopes = exports.SUPPORTED_SCOPES;
+        this.isDefault = true;
+    }
+    getResourceUrl() {
+        const baseUrl = this.urlService.getInstanceBaseUrl().replace(/\/$/, '');
+        return `${baseUrl}${MCP_RESOURCE_PATH}`;
+    }
+    getAudiences() {
+        return [this.getResourceUrl(), LEGACY_MCP_AUDIENCE];
+    }
+};
+exports.McpProtectedResource = McpProtectedResource;
+exports.McpProtectedResource = McpProtectedResource = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [url_service_1.UrlService])
+], McpProtectedResource);
+//# sourceMappingURL=mcp-protected-resource.js.map

package/dist/modules/mcp/mcp-protected-resource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-protected-resource.js","sourceRoot":"","sources":["../../../src/modules/mcp/mcp-protected-resource.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gCAAkC;AAGlC,wDAAoD;AAEvC,QAAA,wBAAwB,GAAG,cAAc,CAAC;AAG1C,QAAA,gBAAgB,GAAG,CAAC,oBAAoB,EAAE,yBAAyB,CAAC,CAAC;AAElF,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAI7C,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AAYtC,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAYhC,YAA6B,UAAsB;QAAtB,eAAU,GAAV,UAAU,CAAY;QAX1C,OAAE,GAAG,gCAAwB,CAAC;QAE9B,WAAM,GAAG,wBAAgB,CAAC;QAO1B,cAAS,GAAG,IAAI,CAAC;IAE4B,CAAC;IAEvD,cAAc;QACb,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxE,OAAO,GAAG,OAAO,GAAG,iBAAiB,EAAE,CAAC;IACzC,CAAC;IAED,YAAY;QAGX,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,mBAAmB,CAAC,CAAC;IACrD,CAAC;CACD,CAAA;AAxBY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,YAAO,GAAE;qCAagC,wBAAU;GAZvC,oBAAoB,CAwBhC"}

package/dist/modules/mcp/mcp-server-middleware.service.d.ts

@@ -1,15 +1,16 @@
 import { NextFunction, Response, Request } from 'express';
 import { JwtService } from '../../services/jwt.service';
+import { OAuthTokenVerifierProxy, type UserWithContext } from '../../services/oauth-token-verifier-proxy.service';
 import { Telemetry } from '../../telemetry';
 import { McpServerApiKeyService } from './mcp-api-key.service';
-import { McpOAuthTokenService } from './mcp-oauth-token.service';
-import type { UserWithContext } from './mcp.types';
+import { McpProtectedResource } from './mcp-protected-resource';
 export declare class McpServerMiddlewareService {
     private readonly mcpServerApiKeyService;
-    private readonly mcpAuthTokenService;
+    private readonly oauthTokenVerifier;
+    private readonly mcpProtectedResource;
     private readonly jwtService;
     private readonly telemetry;
-    constructor(mcpServerApiKeyService: McpServerApiKeyService, mcpAuthTokenService: McpOAuthTokenService, jwtService: JwtService, telemetry: Telemetry);
+    constructor(mcpServerApiKeyService: McpServerApiKeyService, oauthTokenVerifier: OAuthTokenVerifierProxy, mcpProtectedResource: McpProtectedResource, jwtService: JwtService, telemetry: Telemetry);
     getUserForToken(token: string): Promise<UserWithContext>;
     getAuthMiddleware(): (req: Request, res: Response, next: NextFunction) => Promise<void>;
     private extractBearerToken;

package/dist/modules/mcp/mcp-server-middleware.service.js

@@ -14,15 +14,17 @@ const di_1 = require("@n8n/di");
 const n8n_workflow_1 = require("n8n-workflow");
 const auth_error_1 = require("../../errors/response-errors/auth.error");
 const jwt_service_1 = require("../../services/jwt.service");
+const oauth_token_verifier_proxy_service_1 = require("../../services/oauth-token-verifier-proxy.service");
 const telemetry_1 = require("../../telemetry");
 const mcp_api_key_service_1 = require("./mcp-api-key.service");
-const mcp_oauth_token_service_1 = require("./mcp-oauth-token.service");
+const mcp_protected_resource_1 = require("./mcp-protected-resource");
 const mcp_constants_1 = require("./mcp.constants");
 const mcp_utils_1 = require("./mcp.utils");
 let McpServerMiddlewareService = class McpServerMiddlewareService {
-    constructor(mcpServerApiKeyService, mcpAuthTokenService, jwtService, telemetry) {
+    constructor(mcpServerApiKeyService, oauthTokenVerifier, mcpProtectedResource, jwtService, telemetry) {
         this.mcpServerApiKeyService = mcpServerApiKeyService;
-        this.mcpAuthTokenService = mcpAuthTokenService;
+        this.oauthTokenVerifier = oauthTokenVerifier;
+        this.mcpProtectedResource = mcpProtectedResource;
         this.jwtService = jwtService;
         this.telemetry = telemetry;
     }
@@ -42,8 +44,8 @@ let McpServerMiddlewareService = class McpServerMiddlewareService {
             };
         }
         if (decoded?.meta?.isOAuth === true) {
-            const expectedAudience = this.mcpAuthTokenService.getCanonicalResourceUrl();
-            return await this.mcpAuthTokenService.verifyOAuthAccessToken(token, expectedAudience);
+            const expectedAudience = this.mcpProtectedResource.getResourceUrl();
+            return await this.oauthTokenVerifier.verifyOAuthAccessToken(token, expectedAudience);
         }
         return await this.mcpServerApiKeyService.verifyApiKey(token);
     }
@@ -116,7 +118,8 @@ exports.McpServerMiddlewareService = McpServerMiddlewareService;
 exports.McpServerMiddlewareService = McpServerMiddlewareService = __decorate([
     (0, di_1.Service)(),
     __metadata("design:paramtypes", [mcp_api_key_service_1.McpServerApiKeyService,
-        mcp_oauth_token_service_1.McpOAuthTokenService,
+        oauth_token_verifier_proxy_service_1.OAuthTokenVerifierProxy,
+        mcp_protected_resource_1.McpProtectedResource,
         jwt_service_1.JwtService,
         telemetry_1.Telemetry])
 ], McpServerMiddlewareService);

package/dist/modules/mcp/mcp-server-middleware.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-server-middleware.service.js","sourceRoot":"","sources":["../../../src/modules/mcp/mcp-server-middleware.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,gCAAkC;AAElC,+CAA2C;AAE3C,oEAAgE;AAChE,wDAAoD;AACpD,2CAAwC;AAExC,+DAA+D;AAC/D,uEAAiE;AACjE,mDAA0F;AAE1F,2CAA4C;AAQrC,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IACtC,YACkB,sBAA8C,EAC9C,mBAAyC,EACzC,UAAsB,EACtB,SAAoB;QAHpB,2BAAsB,GAAtB,sBAAsB,CAAwB;QAC9C,wBAAmB,GAAnB,mBAAmB,CAAsB;QACzC,eAAU,GAAV,UAAU,CAAY;QACtB,cAAS,GAAT,SAAS,CAAW;IACnC,CAAC;IAMJ,KAAK,CAAC,eAAe,CAAC,KAAa;QAClC,IAAI,OAAyC,CAAC;QAC9C,IAAI,CAAC;YACJ,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAmC,KAAK,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO;gBACN,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE;oBACR,MAAM,EAAE,mBAAmB;oBAC3B,SAAS,EAAE,SAAS;oBACpB,aAAa,EAAE,IAAA,0BAAW,EAAC,KAAK,CAAC,CAAC,OAAO;iBACzC;aACD,CAAC;QACH,CAAC;QAED,IAAI,OAAO,EAAE,IAAI,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;YACrC,MAAM,gBAAgB,GAAG,IAAI,CAAC,mBAAmB,CAAC,uBAAuB,EAAE,CAAC;YAC5E,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,sBAAsB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACvF,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,sBAAsB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC;IAMD,iBAAiB;QAChB,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YAChE,MAAM,mBAAmB,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAExD,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC1B,IAAI,CAAC,wBAAwB,CAAC,GAAG,EAAE,GAAG,EAAE;oBACvC,MAAM,EAAE,8BAA8B;oBACtC,SAAS,EAAE,SAAS;oBACpB,aAAa,EAAE,+BAA+B;iBAC9C,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;YAED,IAAI,KAAa,CAAC;YAClB,IAAI,CAAC;gBACJ,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,EAAE,EAAE,CAAC;gBACb,MAAM,KAAK,GAAG,IAAA,0BAAW,EAAC,EAAE,CAAC,CAAC;gBAC9B,IAAI,CAAC,wBAAwB,CAAC,GAAG,EAAE,GAAG,EAAE;oBACvC,MAAM,EAAE,uBAAuB;oBAC/B,SAAS,EAAE,SAAS;oBACpB,aAAa,EAAE,KAAK,CAAC,OAAO;iBAC5B,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YAEzB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACX,IAAI,CAAC,wBAAwB,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;gBACxD,OAAO;YACR,CAAC;YAEA,GAA4B,CAAC,IAAI,GAAG,IAAI,CAAC;YACzC,GAA4E,CAAC,WAAW;gBACxF,MAAM,CAAC,QAAQ,CAAC;YAEjB,IAAI,EAAE,CAAC;QACR,CAAC,CAAC;IACH,CAAC;IAEO,kBAAkB,CAAC,WAAmB;QAC7C,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,sBAAS,CAAC,6DAA6D,CAAC,CAAC;QACpF,CAAC;QAED,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACzD,IAAI,UAAU,EAAE,CAAC;YAChB,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;QAED,MAAM,IAAI,sBAAS,CAAC,8DAA8D,CAAC,CAAC;IACrF,CAAC;IAEO,wBAAwB,CAAC,GAAa,EAAE,GAAY,EAAE,OAA8B;QAC3F,IAAI,CAAC,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAE1C,GAAG,CAAC,MAAM,CAAC,kBAAkB,EAAE,+BAA+B,CAAC,CAAC;QAChE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACpB,OAAO,EAAE,GAAG,0CAA0B,GAAG,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE;SACrG,CAAC,CAAC;IACJ,CAAC;IAEO,sBAAsB,CAAC,GAAY,EAAE,OAA8B;QAC1E,MAAM,UAAU,GAAG,IAAA,yBAAa,EAAC,GAAG,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG;YACf,qBAAqB,EAAE,OAAO;YAC9B,KAAK,EAAE,0CAA0B;YACjC,WAAW,EAAE,UAAU,EAAE,IAAI;YAC7B,cAAc,EAAE,UAAU,EAAE,OAAO;YACnC,GAAG,OAAO;SACV,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,2CAA2B,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;CACD,CAAA;AAlHY,gEAA0B;qCAA1B,0BAA0B;IADtC,IAAA,YAAO,GAAE;qCAGiC,4CAAsB;QACzB,8CAAoB;QAC7B,wBAAU;QACX,qBAAS;GAL1B,0BAA0B,CAkHtC"}
+{"version":3,"file":"mcp-server-middleware.service.js","sourceRoot":"","sources":["../../../src/modules/mcp/mcp-server-middleware.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,gCAAkC;AAElC,+CAA2C;AAE3C,oEAAgE;AAChE,wDAAoD;AACpD,sGAIuD;AACvD,2CAAwC;AAExC,+DAA+D;AAC/D,qEAAgE;AAChE,mDAA0F;AAC1F,2CAA4C;AAQrC,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IACtC,YACkB,sBAA8C,EAC9C,kBAA2C,EAC3C,oBAA0C,EAC1C,UAAsB,EACtB,SAAoB;QAJpB,2BAAsB,GAAtB,sBAAsB,CAAwB;QAC9C,uBAAkB,GAAlB,kBAAkB,CAAyB;QAC3C,yBAAoB,GAApB,oBAAoB,CAAsB;QAC1C,eAAU,GAAV,UAAU,CAAY;QACtB,cAAS,GAAT,SAAS,CAAW;IACnC,CAAC;IAMJ,KAAK,CAAC,eAAe,CAAC,KAAa;QAClC,IAAI,OAAyC,CAAC;QAC9C,IAAI,CAAC;YACJ,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAmC,KAAK,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO;gBACN,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE;oBACR,MAAM,EAAE,mBAAmB;oBAC3B,SAAS,EAAE,SAAS;oBACpB,aAAa,EAAE,IAAA,0BAAW,EAAC,KAAK,CAAC,CAAC,OAAO;iBACzC;aACD,CAAC;QACH,CAAC;QAED,IAAI,OAAO,EAAE,IAAI,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;YACrC,MAAM,gBAAgB,GAAG,IAAI,CAAC,oBAAoB,CAAC,cAAc,EAAE,CAAC;YACpE,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACtF,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,sBAAsB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC;IAMD,iBAAiB;QAChB,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YAChE,MAAM,mBAAmB,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAExD,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC1B,IAAI,CAAC,wBAAwB,CAAC,GAAG,EAAE,GAAG,EAAE;oBACvC,MAAM,EAAE,8BAA8B;oBACtC,SAAS,EAAE,SAAS;oBACpB,aAAa,EAAE,+BAA+B;iBAC9C,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;YAED,IAAI,KAAa,CAAC;YAClB,IAAI,CAAC;gBACJ,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,EAAE,EAAE,CAAC;gBACb,MAAM,KAAK,GAAG,IAAA,0BAAW,EAAC,EAAE,CAAC,CAAC;gBAC9B,IAAI,CAAC,wBAAwB,CAAC,GAAG,EAAE,GAAG,EAAE;oBACvC,MAAM,EAAE,uBAAuB;oBAC/B,SAAS,EAAE,SAAS;oBACpB,aAAa,EAAE,KAAK,CAAC,OAAO;iBAC5B,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YAEzB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACX,IAAI,CAAC,wBAAwB,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;gBACxD,OAAO;YACR,CAAC;YAEA,GAA4B,CAAC,IAAI,GAAG,IAAI,CAAC;YACzC,GAA4E,CAAC,WAAW;gBACxF,MAAM,CAAC,QAAQ,CAAC;YAEjB,IAAI,EAAE,CAAC;QACR,CAAC,CAAC;IACH,CAAC;IAEO,kBAAkB,CAAC,WAAmB;QAC7C,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,sBAAS,CAAC,6DAA6D,CAAC,CAAC;QACpF,CAAC;QAED,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACzD,IAAI,UAAU,EAAE,CAAC;YAChB,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;QAED,MAAM,IAAI,sBAAS,CAAC,8DAA8D,CAAC,CAAC;IACrF,CAAC;IAEO,wBAAwB,CAAC,GAAa,EAAE,GAAY,EAAE,OAA8B;QAC3F,IAAI,CAAC,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAE1C,GAAG,CAAC,MAAM,CAAC,kBAAkB,EAAE,+BAA+B,CAAC,CAAC;QAChE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACpB,OAAO,EAAE,GAAG,0CAA0B,GAAG,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE;SACrG,CAAC,CAAC;IACJ,CAAC;IAEO,sBAAsB,CAAC,GAAY,EAAE,OAA8B;QAC1E,MAAM,UAAU,GAAG,IAAA,yBAAa,EAAC,GAAG,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG;YACf,qBAAqB,EAAE,OAAO;YAC9B,KAAK,EAAE,0CAA0B;YACjC,WAAW,EAAE,UAAU,EAAE,IAAI;YAC7B,cAAc,EAAE,UAAU,EAAE,OAAO;YACnC,GAAG,OAAO;SACV,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,2CAA2B,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;CACD,CAAA;AAnHY,gEAA0B;qCAA1B,0BAA0B;IADtC,IAAA,YAAO,GAAE;qCAGiC,4CAAsB;QAC1B,4DAAuB;QACrB,6CAAoB;QAC9B,wBAAU;QACX,qBAAS;GAN1B,0BAA0B,CAmHtC"}

package/dist/modules/mcp/mcp.errors.d.ts

@@ -1,23 +1,10 @@
-import { ServerError } from '@modelcontextprotocol/sdk/server/auth/errors.js';
 import { UserError } from 'n8n-workflow';
-import { AuthError } from '../../errors/response-errors/auth.error';
 import type { WorkflowNotFoundReason } from './mcp.types';
-export declare const buildMcpClientLimitReachedMessage: (limit: number) => string;
-export declare class McpClientLimitReachedError extends ServerError {
-    readonly limit: number;
-    constructor(limit: number);
-}
 export declare class McpExecutionTimeoutError extends UserError {
     executionId: string | null;
     timeoutMs: number;
     constructor(executionId: string | null, timeoutMs: number);
 }
-export declare class JWTVerificationError extends AuthError {
-    constructor();
-}
-export declare class AccessTokenNotFoundError extends AuthError {
-    constructor();
-}
 export declare class WorkflowAccessError extends UserError {
     readonly reason: WorkflowNotFoundReason;
     constructor(message: string, reason: WorkflowNotFoundReason);

package/dist/modules/mcp/mcp.errors.js

@@ -1,20 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.WorkflowAccessError = exports.AccessTokenNotFoundError = exports.JWTVerificationError = exports.McpExecutionTimeoutError = exports.McpClientLimitReachedError = exports.buildMcpClientLimitReachedMessage = void 0;
-const errors_js_1 = require("@modelcontextprotocol/sdk/server/auth/errors.js");
+exports.WorkflowAccessError = exports.McpExecutionTimeoutError = void 0;
 const constants_1 = require("@n8n/constants");
 const n8n_workflow_1 = require("n8n-workflow");
-const auth_error_1 = require("../../errors/response-errors/auth.error");
-const buildMcpClientLimitReachedMessage = (limit) => `This n8n instance has reached its maximum of ${limit} registered MCP clients. Ask an administrator to revoke unused clients or raise N8N_MCP_MAX_REGISTERED_CLIENTS.`;
-exports.buildMcpClientLimitReachedMessage = buildMcpClientLimitReachedMessage;
-class McpClientLimitReachedError extends errors_js_1.ServerError {
-    constructor(limit) {
-        super((0, exports.buildMcpClientLimitReachedMessage)(limit));
-        this.name = 'McpClientLimitReachedError';
-        this.limit = limit;
-    }
-}
-exports.McpClientLimitReachedError = McpClientLimitReachedError;
 class McpExecutionTimeoutError extends n8n_workflow_1.UserError {
     constructor(executionId, timeoutMs) {
         const timeoutSeconds = timeoutMs * constants_1.Time.milliseconds.toSeconds;
@@ -25,20 +13,6 @@ class McpExecutionTimeoutError extends n8n_workflow_1.UserError {
     }
 }
 exports.McpExecutionTimeoutError = McpExecutionTimeoutError;
-class JWTVerificationError extends auth_error_1.AuthError {
-    constructor() {
-        super('JWT Verification Failed');
-        this.name = 'JWTVerificationError';
-    }
-}
-exports.JWTVerificationError = JWTVerificationError;
-class AccessTokenNotFoundError extends auth_error_1.AuthError {
-    constructor() {
-        super('Access Token Not Found in Database');
-        this.name = 'AccessTokenNotFoundError';
-    }
-}
-exports.AccessTokenNotFoundError = AccessTokenNotFoundError;
 class WorkflowAccessError extends n8n_workflow_1.UserError {
     constructor(message, reason) {
         super(message);

package/dist/modules/mcp/mcp.errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.errors.js","sourceRoot":"","sources":["../../../src/modules/mcp/mcp.errors.ts"],"names":[],"mappings":";;;AAAA,+EAA8E;AAC9E,8CAAsC;AACtC,+CAAyC;AAEzC,oEAAgE;AAIzD,MAAM,iCAAiC,GAAG,CAAC,KAAa,EAAU,EAAE,CAC1E,gDAAgD,KAAK,iHAAiH,CAAC;AAD3J,QAAA,iCAAiC,qCAC0H;AAQxK,MAAa,0BAA2B,SAAQ,uBAAW;IAG1D,YAAY,KAAa;QACxB,KAAK,CAAC,IAAA,yCAAiC,EAAC,KAAK,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACpB,CAAC;CACD;AARD,gEAQC;AAKD,MAAa,wBAAyB,SAAQ,wBAAS;IAItD,YAAY,WAA0B,EAAE,SAAiB;QACxD,MAAM,cAAc,GAAG,SAAS,GAAG,gBAAI,CAAC,YAAY,CAAC,SAAS,CAAC;QAC/D,KAAK,CAAC,sCAAsC,cAAc,UAAU,CAAC,CAAC;QAEtE,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;QACvC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC5B,CAAC;CACD;AAZD,4DAYC;AAED,MAAa,oBAAqB,SAAQ,sBAAS;IAClD;QACC,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACpC,CAAC;CACD;AALD,oDAKC;AAED,MAAa,wBAAyB,SAAQ,sBAAS;IACtD;QACC,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACxC,CAAC;CACD;AALD,4DAKC;AAMD,MAAa,mBAAoB,SAAQ,wBAAS;IAGjD,YAAY,OAAe,EAAE,MAA8B;QAC1D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,CAAC;CACD;AARD,kDAQC"}
+{"version":3,"file":"mcp.errors.js","sourceRoot":"","sources":["../../../src/modules/mcp/mcp.errors.ts"],"names":[],"mappings":";;;AAAA,8CAAsC;AACtC,+CAAyC;AAOzC,MAAa,wBAAyB,SAAQ,wBAAS;IAItD,YAAY,WAA0B,EAAE,SAAiB;QACxD,MAAM,cAAc,GAAG,SAAS,GAAG,gBAAI,CAAC,YAAY,CAAC,SAAS,CAAC;QAC/D,KAAK,CAAC,sCAAsC,cAAc,UAAU,CAAC,CAAC;QAEtE,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;QACvC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC5B,CAAC;CACD;AAZD,4DAYC;AAMD,MAAa,mBAAoB,SAAQ,wBAAS;IAGjD,YAAY,OAAe,EAAE,MAA8B;QAC1D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,CAAC;CACD;AARD,kDAQC"}

package/dist/modules/mcp/mcp.module.d.ts

@@ -5,6 +5,5 @@ export declare class McpModule implements ModuleInterface {
         mcpAccessEnabled: boolean;
         mcpManagedByEnv: boolean;
     }>;
-    entities(): Promise<never>;
     shutdown(): Promise<void>;
 }

package/dist/modules/mcp/mcp.module.js

@@ -50,9 +50,9 @@ let McpModule = class McpModule {
     async init() {
         await Promise.resolve().then(() => __importStar(require('./mcp.controller')));
         await Promise.resolve().then(() => __importStar(require('./mcp.settings.controller')));
-        await Promise.resolve().then(() => __importStar(require('./mcp.oauth.controller')));
-        await Promise.resolve().then(() => __importStar(require('./mcp.auth.consent.controller')));
-        await Promise.resolve().then(() => __importStar(require('./mcp.oauth-clients.controller')));
+        const { ProtectedResourceRegistry } = await Promise.resolve().then(() => __importStar(require('../../services/protected-resource.registry')));
+        const { McpProtectedResource } = await Promise.resolve().then(() => __importStar(require('./mcp-protected-resource')));
+        di_1.Container.get(ProtectedResourceRegistry).register(di_1.Container.get(McpProtectedResource));
     }
     async settings() {
         const { McpSettingsService } = await Promise.resolve().then(() => __importStar(require('./mcp.settings.service')));
@@ -60,14 +60,6 @@ let McpModule = class McpModule {
         const { mcpManagedByEnv } = di_1.Container.get(config_1.InstanceSettingsLoaderConfig);
         return { mcpAccessEnabled, mcpManagedByEnv };
     }
-    async entities() {
-        const { OAuthClient } = await Promise.resolve().then(() => __importStar(require('./database/entities/oauth-client.entity')));
-        const { AuthorizationCode } = await Promise.resolve().then(() => __importStar(require('./database/entities/oauth-authorization-code.entity')));
-        const { AccessToken } = await Promise.resolve().then(() => __importStar(require('./database/entities/oauth-access-token.entity')));
-        const { RefreshToken } = await Promise.resolve().then(() => __importStar(require('./database/entities/oauth-refresh-token.entity')));
-        const { UserConsent } = await Promise.resolve().then(() => __importStar(require('./database/entities/oauth-user-consent.entity')));
-        return [OAuthClient, AuthorizationCode, AccessToken, RefreshToken, UserConsent];
-    }
     async shutdown() { }
 };
 exports.McpModule = McpModule;

package/dist/modules/mcp/mcp.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.module.js","sourceRoot":"","sources":["../../../src/modules/mcp/mcp.module.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,wCAA2D;AAE3D,gDAA4D;AAC5D,gCAAoC;AAQ7B,IAAM,SAAS,GAAf,MAAM,SAAS;IACrB,KAAK,CAAC,IAAI;QACT,wDAAa,kBAAkB,GAAC,CAAC;QACjC,wDAAa,2BAA2B,GAAC,CAAC;QAC1C,wDAAa,wBAAwB,GAAC,CAAC;QACvC,wDAAa,+BAA+B,GAAC,CAAC;QAC9C,wDAAa,gCAAgC,GAAC,CAAC;IAChD,CAAC;IAOD,KAAK,CAAC,QAAQ;QACb,MAAM,EAAE,kBAAkB,EAAE,GAAG,wDAAa,wBAAwB,GAAC,CAAC;QACtE,MAAM,gBAAgB,GAAG,MAAM,cAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,UAAU,EAAE,CAAC;QAC9E,MAAM,EAAE,eAAe,EAAE,GAAG,cAAS,CAAC,GAAG,CAAC,qCAA4B,CAAC,CAAC;QACxE,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,QAAQ;QACb,MAAM,EAAE,WAAW,EAAE,GAAG,wDAAa,yCAAyC,GAAC,CAAC;QAChF,MAAM,EAAE,iBAAiB,EAAE,GAAG,wDAC7B,qDAAqD,GACrD,CAAC;QACF,MAAM,EAAE,WAAW,EAAE,GAAG,wDAAa,+CAA+C,GAAC,CAAC;QACtF,MAAM,EAAE,YAAY,EAAE,GAAG,wDAAa,gDAAgD,GAAC,CAAC;QACxF,MAAM,EAAE,WAAW,EAAE,GAAG,wDAAa,+CAA+C,GAAC,CAAC;QAEtF,OAAO,CAAC,WAAW,EAAE,iBAAiB,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,CAAU,CAAC;IAC1F,CAAC;IAGK,AAAN,KAAK,CAAC,QAAQ,KAAI,CAAC;CACnB,CAAA;AAnCY,8BAAS;AAkCf;IADL,IAAA,uBAAU,GAAE;;;;yCACM;oBAlCP,SAAS;IADrB,IAAA,0BAAa,EAAC,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;GAC3C,SAAS,CAmCrB"}
+{"version":3,"file":"mcp.module.js","sourceRoot":"","sources":["../../../src/modules/mcp/mcp.module.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,wCAA2D;AAE3D,gDAA4D;AAC5D,gCAAoC;AAS7B,IAAM,SAAS,GAAf,MAAM,SAAS;IACrB,KAAK,CAAC,IAAI;QACT,wDAAa,kBAAkB,GAAC,CAAC;QACjC,wDAAa,2BAA2B,GAAC,CAAC;QAK1C,MAAM,EAAE,yBAAyB,EAAE,GAAG,wDAAa,wCAAwC,GAAC,CAAC;QAC7F,MAAM,EAAE,oBAAoB,EAAE,GAAG,wDAAa,0BAA0B,GAAC,CAAC;QAC1E,cAAS,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,QAAQ,CAAC,cAAS,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC;IACxF,CAAC;IAOD,KAAK,CAAC,QAAQ;QACb,MAAM,EAAE,kBAAkB,EAAE,GAAG,wDAAa,wBAAwB,GAAC,CAAC;QACtE,MAAM,gBAAgB,GAAG,MAAM,cAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,UAAU,EAAE,CAAC;QAC9E,MAAM,EAAE,eAAe,EAAE,GAAG,cAAS,CAAC,GAAG,CAAC,qCAA4B,CAAC,CAAC;QACxE,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,CAAC;IAC9C,CAAC;IAGK,AAAN,KAAK,CAAC,QAAQ,KAAI,CAAC;CACnB,CAAA;AA3BY,8BAAS;AA0Bf;IADL,IAAA,uBAAU,GAAE;;;;yCACM;oBA1BP,SAAS;IADrB,IAAA,0BAAa,EAAC,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;GAC3C,SAAS,CA2BrB"}

package/dist/modules/mcp/mcp.service.d.ts

@@ -11,8 +11,10 @@ import { CredentialsService } from '../../credentials/credentials.service';
 import { DataTableProxyService } from '../../modules/data-table/data-table-proxy.service';
 import { NodeTypes } from '../../node-types';
 import { PostHogClient } from '../../posthog';
+import { NodeResourceExplorerService } from '../../services/node-resource-explorer.service';
 import { ProjectService } from '../../services/project.service.ee';
 import { RoleService } from '../../services/role.service';
+import { TagService } from '../../services/tag.service';
 import { UrlService } from '../../services/url.service';
 import { Telemetry } from '../../telemetry';
 import { WorkflowRunner } from '../../workflow-runner';
@@ -49,10 +51,12 @@ export declare class McpService {
     private readonly executionService;
     private readonly dataTableProxyService;
     private readonly collaborationService;
+    private readonly nodeResourceExplorerService;
+    private readonly tagService;
     private readonly licenseState;
     private readonly postHogClient;
     private readonly pendingResponses;
-    constructor(logger: Logger, executionsConfig: ExecutionsConfig, instanceSettings: InstanceSettings, workflowFinderService: WorkflowFinderService, workflowService: WorkflowService, urlService: UrlService, credentialsService: CredentialsService, activeExecutions: ActiveExecutions, globalConfig: GlobalConfig, telemetry: Telemetry, workflowRunner: WorkflowRunner, roleService: RoleService, projectService: ProjectService, nodeCatalogService: NodeCatalogService, workflowCreationService: WorkflowCreationService, nodeTypes: NodeTypes, projectRepository: ProjectRepository, folderRepository: FolderRepository, sharedWorkflowRepository: SharedWorkflowRepository, executionRepository: ExecutionRepository, executionService: ExecutionService, dataTableProxyService: DataTableProxyService, collaborationService: CollaborationService, licenseState: LicenseState, postHogClient: PostHogClient);
+    constructor(logger: Logger, executionsConfig: ExecutionsConfig, instanceSettings: InstanceSettings, workflowFinderService: WorkflowFinderService, workflowService: WorkflowService, urlService: UrlService, credentialsService: CredentialsService, activeExecutions: ActiveExecutions, globalConfig: GlobalConfig, telemetry: Telemetry, workflowRunner: WorkflowRunner, roleService: RoleService, projectService: ProjectService, nodeCatalogService: NodeCatalogService, workflowCreationService: WorkflowCreationService, nodeTypes: NodeTypes, projectRepository: ProjectRepository, folderRepository: FolderRepository, sharedWorkflowRepository: SharedWorkflowRepository, executionRepository: ExecutionRepository, executionService: ExecutionService, dataTableProxyService: DataTableProxyService, collaborationService: CollaborationService, nodeResourceExplorerService: NodeResourceExplorerService, tagService: TagService, licenseState: LicenseState, postHogClient: PostHogClient);
     resolveMcpAppsVariant(user: User): Promise<McpAppsResolution>;
     private buildMcpAppTelemetryConfig;
     getServer(user: User, mcpAppsEnabled: boolean, clientInfo?: McpClientInfo): Promise<McpServer>;