djangorestframework-mcp-server 0.1.0__py3-none-any.whl

djangorestframework_mcp_server-0.1.0.dist-info/METADATA

@@ -0,0 +1,151 @@
+Metadata-Version: 2.4
+Name: djangorestframework-mcp-server
+Version: 0.1.0
+Summary: Expose djangorestframework-services services and selectors as an MCP (Model Context Protocol) server.
+Project-URL: Homepage, https://github.com/Artui/djangorestframework-mcp-server
+Project-URL: Repository, https://github.com/Artui/djangorestframework-mcp-server
+Project-URL: Issues, https://github.com/Artui/djangorestframework-mcp-server/issues
+Author-email: Artur Veres <artur8118@gmail.com>
+License: MIT
+License-File: LICENSE
+Keywords: ai,django,drf,llm,mcp,model-context-protocol,rest-framework
+Classifier: Development Status :: 3 - Alpha
+Classifier: Environment :: Web Environment
+Classifier: Framework :: Django
+Classifier: Framework :: Django :: 4.2
+Classifier: Framework :: Django :: 5.0
+Classifier: Framework :: Django :: 5.1
+Classifier: Framework :: Django :: 5.2
+Classifier: Framework :: Django :: 6.0
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Topic :: Internet :: WWW/HTTP
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Requires-Python: >=3.10
+Requires-Dist: django>=4.2
+Requires-Dist: djangorestframework-dataclasses>=1.3.1
+Requires-Dist: djangorestframework-services==0.6.0
+Requires-Dist: djangorestframework>=3.14
+Requires-Dist: typing-extensions>=4.6
+Provides-Extra: oauth
+Requires-Dist: django-oauth-toolkit>=2.3; extra == 'oauth'
+Provides-Extra: otel
+Requires-Dist: opentelemetry-api>=1.27; extra == 'otel'
+Provides-Extra: redis
+Requires-Dist: redis>=5.0; extra == 'redis'
+Provides-Extra: toon
+Requires-Dist: python-toon>=0.1; extra == 'toon'
+Description-Content-Type: text/markdown
+
+# djangorestframework-mcp-server
+
+[![tests](https://github.com/Artui/djangorestframework-mcp-server/actions/workflows/tests.yml/badge.svg)](https://github.com/Artui/djangorestframework-mcp-server/actions/workflows/tests.yml)
+
+Expose [`djangorestframework-services`](https://github.com/arturveres/djangorestframework-services)
+services and selectors as a [Model Context Protocol](https://modelcontextprotocol.io)
+(MCP) server, conforming to MCP **2025-11-25** (Streamable HTTP).
+
+> **Status: alpha.** API surfaces and wire details may shift before `0.1` is tagged.
+
+## Idea
+
+Register `ServiceSpec` instances directly — no DRF router or viewset
+involvement. The unit of registration is the `ServiceSpec`, not a view.
+
+```python
+from django.urls import include, path
+from rest_framework_services.types.service_spec import ServiceSpec
+
+from rest_framework_mcp import MCPServer
+
+server = MCPServer(name="my-app")
+
+server.register_tool(
+    name="invoices.create",
+    spec=ServiceSpec(
+        service=create_invoice,
+        input_serializer=InvoiceInputSerializer,
+        output_serializer=InvoiceOutputSerializer,
+    ),
+)
+
+server.register_resource(
+    name="invoice",
+    uri_template="invoices://{pk}",
+    selector=get_invoice,
+    output_serializer=InvoiceOutputSerializer,
+)
+
+urlpatterns = [path("mcp/", include(server.urls))]
+```
+
+A decorator form is also supported (`@server.tool(...)` / `@server.resource(...)`).
+See the [quickstart](docs/quickstart.md) for the full end-to-end recipe.
+
+- **Services** (mutations) → MCP **tools**.
+- **Selectors** (reads) → MCP **resources**.
+- A single `/mcp` endpoint speaks Streamable HTTP. The
+  `/.well-known/oauth-protected-resource` endpoint comes mounted alongside.
+
+## What ships in v1
+
+- `tools/list`, `tools/call`, `resources/list`, `resources/templates/list`,
+  `resources/read`.
+- Pluggable auth: `DjangoOAuthToolkitBackend` (default when DOT is installed)
+  and `AllowAnyBackend` (dev only). Per-binding `MCPPermission` classes
+  (`ScopeRequired`, `DjangoPermRequired`) plus your own.
+- RFC 8707 audience binding when `RESOURCE_URL` is configured; RFC 9728 PRM
+  served from the configured backend.
+- Output formats: JSON (default) and TOON (token-oriented; optional extra
+  with safe JSON fallback).
+- Origin allowlist + protocol-version validation + session lifecycle per
+  the 2025-11-25 transport rules.
+
+## Install
+
+```bash
+pip install djangorestframework-mcp-server                              # JSON only
+pip install "djangorestframework-mcp-server[toon]"                      # +TOON encoder
+pip install "djangorestframework-mcp-server[oauth]"                     # +django-oauth-toolkit backend
+pip install "djangorestframework-mcp-server[redis]"                     # +Redis SSE broker for multi-worker ASGI
+pip install "djangorestframework-mcp-server[otel]"                      # +OpenTelemetry instrumentation
+pip install "djangorestframework-mcp-server[toon,oauth,redis,otel]"     # all optional extras
+```
+
+Optional extras degrade gracefully: TOON falls back to JSON with a runtime
+warning if `python-toon` is not installed, and the OAuth backend module
+imports cleanly without `oauth2_provider` — the `ImportError` only fires when
+you actually configure it.
+
+## Try it
+
+Install [mcp-inspector](https://github.com/modelcontextprotocol/inspector) and
+point it at your dev server:
+
+```bash
+npx @modelcontextprotocol/inspector --url http://localhost:8000/mcp/
+```
+
+Inspector lists tools, fills in arguments from the generated JSON Schema, and
+walks the OAuth auth flow against your configured Authorization Server.
+
+## Documentation
+
+- [Quickstart](docs/quickstart.md) — copy-pasteable end-to-end.
+- [Concepts](docs/concepts.md) — tools vs resources, sessions, output formats.
+- [Authentication](docs/auth.md) — backends, permissions, audience binding,
+  bring-your-own AS recipe.
+- [Recipes](docs/recipes/index.md) — focused cookbook entries.
+- [Reference](docs/reference/index.md) — autodocs for every public symbol.
+
+## License
+
+MIT.

djangorestframework_mcp_server-0.1.0.dist-info/RECORD

@@ -0,0 +1,110 @@
+rest_framework_mcp/__init__.py,sha256=zBpah0qrQdvM3fUXRiW0NVhmmF0mVd_m7Iq3iap-U_s,3787
+rest_framework_mcp/conf.py,sha256=HyT1tt9XhIubL982syLIi5NK3nj0MzN5TYB4O-MCF0o,2732
+rest_framework_mcp/version.py,sha256=YtKE5kaJx3eLef8IxINR-rwWwGss90i5tQB7CyRvkj8,90
+rest_framework_mcp/_compat/__init__.py,sha256=kaiQ6o7AKBrlTjyB1L29U3bp7_x8_fvNqUD1U00onTU,72
+rest_framework_mcp/_compat/acall.py,sha256=YepNHSp7TmpghGJ5esf0pmZjDkOpLj1heo8k7LCzWn8,994
+rest_framework_mcp/_compat/tracing.py,sha256=eO-DZJkzlm_0f4e4wQ-q2zUZ0LFMeF-nOptE7b7gopU,2154
+rest_framework_mcp/_compat/utils.py,sha256=N2LTGISGQYhXg_2E99PyFdvLQW3Zb88zaLHdFZF5wtU,1664
+rest_framework_mcp/adapters/__init__.py,sha256=1Jc15brrF_1UqSIEj49LlCgKXbgRP0VU4i45s5uM8nM,219
+rest_framework_mcp/adapters/selector_to_resource.py,sha256=G8E4JIhrbceArjEdApzhVvGo-xR2YtvOqkMZ2D61xMc,2593
+rest_framework_mcp/adapters/service_to_tool.py,sha256=Vziqpc3AT3TWhN-nAAmiv7DIa6rDAeNs-u_wJGyHx9A,1131
+rest_framework_mcp/auth/__init__.py,sha256=BVWNlfmLFzsyRZmQYxjVlP9h_39kA4OrPlxjUuP3WGo,885
+rest_framework_mcp/auth/audience.py,sha256=9uYieTk0ete2J_P_jayM-LTTcndg2SajjP20vdQJU60,1098
+rest_framework_mcp/auth/auth_backend.py,sha256=RrnlSR7VRUhCvYoyW4EW3ZJi7KGD7csDpslBSChHnUQ,1093
+rest_framework_mcp/auth/insufficient_scope_response.py,sha256=7B_5ebWHNBo5NctYpxrCHihI3CVUIy0g9PlzMd62GLk,653
+rest_framework_mcp/auth/protected_resource_metadata.py,sha256=tNLgNC7MR8fZXy5j0F0b8otoVvsdDGV1-1w6CJ3hFus,1309
+rest_framework_mcp/auth/token_info.py,sha256=EZkqCcX4A5CtocLCxIxfvohwrO6UKG1CHYbdm7096Us,1239
+rest_framework_mcp/auth/unauthenticated_response.py,sha256=ypI1Wk7pn-L_6dz-3XHA8KlfIVQ3ErfmD3J2wECINS4,669
+rest_framework_mcp/auth/backends/__init__.py,sha256=qm8WIWKB-AxS8fTJXMkGP6_16hgjGt5_thWiZiOVMX8,239
+rest_framework_mcp/auth/backends/allow_any_backend.py,sha256=eeE1bjWttXt0IduQx9Ech4c9-PYJ1NxMk2vNKyTE6nw,1344
+rest_framework_mcp/auth/backends/django_oauth_toolkit_backend.py,sha256=8sN9knRzHLf26VdeCOUY9ADg_WY_dtmiL3sxOTOLZUM,4425
+rest_framework_mcp/auth/permissions/__init__.py,sha256=kHYh5dI1fwxyYl9uly96xi56o7U41TPjQrAGuaLpWmA,310
+rest_framework_mcp/auth/permissions/django_perm_required.py,sha256=meGI-HiIm--pi_1ZRq83-8jdAjGvGd8AgFnxmU2STUc,933
+rest_framework_mcp/auth/permissions/mcp_permission.py,sha256=wmzhzv6Yt4NaR0dHItZsULwNpjqRhe3xTqHDzaeu_b0,1212
+rest_framework_mcp/auth/permissions/scope_required.py,sha256=dAKEgwf-7MDQnThj45jbVj3prRBnKDdwYR0JTOfUw0Q,685
+rest_framework_mcp/auth/rate_limits/__init__.py,sha256=yqPiR8AXNVy9VNt7umJ5A96mpfZfEISC_KlJ5bVP9SI,480
+rest_framework_mcp/auth/rate_limits/fixed_window_rate_limit.py,sha256=0EUKxKGtW-8PrDevjuK1Vyq_Wr8PqaKFCkazBeqij7M,3219
+rest_framework_mcp/auth/rate_limits/mcp_rate_limit.py,sha256=Syw5MVMfNTTchfKayvRXiSVMeBSn_6T7Wu2dhiYm5Nw,1260
+rest_framework_mcp/auth/rate_limits/sliding_window_rate_limit.py,sha256=8P15HN5FyhRwVx33W505LBYiFbrrny30UQEw-EKgLH8,3757
+rest_framework_mcp/auth/rate_limits/token_bucket_rate_limit.py,sha256=O6nW2JtZprsvG1LmUKEEvCdPDK6aMfxfAR1y0GmFjfk,4109
+rest_framework_mcp/handlers/__init__.py,sha256=EPVNRii5oHDhDl3aq28W8dGSvF89B7woOP87U8TyLJA,938
+rest_framework_mcp/handlers/async_dispatch.py,sha256=47Q7OeVNzBmKv5TTQAwiO1vW_b9Rct5f93CBxHrOUD8,1382
+rest_framework_mcp/handlers/context.py,sha256=PYM6PQ3OxsvEpprJTQ4Mg3qMBvt4tubBoVgLgqZVSvA,939
+rest_framework_mcp/handlers/dispatch.py,sha256=V89tvdHWTR29jOlZm17fnRIbdiwW1YhdC3EIc5xVBRM,2472
+rest_framework_mcp/handlers/handle_initialize.py,sha256=XNgnzmpILRWKA4i7CBfj3yQArRKVM_sdOSFk6zIRhIA,2306
+rest_framework_mcp/handlers/handle_ping.py,sha256=nq8mZEnzK9zon9i3KposSkgXSKv_8eNxxswOG73CwrU,474
+rest_framework_mcp/handlers/handle_prompts_get.py,sha256=SNQ1vaYQ1gymGjLpRP8yU9mw8Z15heWM_7992jEABSI,4184
+rest_framework_mcp/handlers/handle_prompts_get_async.py,sha256=LTRvqZZ10RxzHBTBkewCPb-7c8C39PbtiGMmo0Xi1rk,3980
+rest_framework_mcp/handlers/handle_prompts_list.py,sha256=Yct3O_r3ruOt5q8tS1x2gIYS-dYizFje_SWSyK6nH74,1625
+rest_framework_mcp/handlers/handle_resources_list.py,sha256=ttmBIDeiD4cyNsEBiCoMjpfJxtWu2TDdSWxYWrhkqG4,1637
+rest_framework_mcp/handlers/handle_resources_read.py,sha256=f2o2ICfQgLkn_eOGBFdJnIjkXEabyLluU6dkG2G-WFg,4095
+rest_framework_mcp/handlers/handle_resources_read_async.py,sha256=J6e9Hnio4cgPk5q2eKUTVYP2IHjH-hs8oL1RnddK7rg,4175
+rest_framework_mcp/handlers/handle_resources_templates_list.py,sha256=ay-oJT3uxPQlLiM__cBRxTOpKPiS7UtZrU6PAHCTv_Q,1621
+rest_framework_mcp/handlers/handle_tools_call.py,sha256=R5g6Dra0tesq9Bt-tFKowfxJulPcthutNk72ZoryHfo,8605
+rest_framework_mcp/handlers/handle_tools_call_async.py,sha256=ui_RXcBXOO6Ynv0J8CCzpMIdGN1IvSQTVHg2OWoR2pU,6200
+rest_framework_mcp/handlers/handle_tools_list.py,sha256=Cxc1becBFlHvaHundzaOY2mXEarrRBUG40hp48R40xQ,2070
+rest_framework_mcp/handlers/pagination.py,sha256=tc7fYV-4d79gSf8nM_9-K2wgFdI4A5cOp_f7QX51WyU,2318
+rest_framework_mcp/handlers/render_prompt_messages.py,sha256=0yrwymaQujw9mchetXdN8L3s_419Whl0Dkp1FxdiQG8,1673
+rest_framework_mcp/handlers/utils.py,sha256=MXViAZ0X-Z_9drE_UE4AgRvHBKMmv1ME2GDTcorfzK4,4532
+rest_framework_mcp/output/__init__.py,sha256=fP3Tu99o6pOQ7QXhz-zMZNeUqKySP1BGQ5GXlIhVpQg,329
+rest_framework_mcp/output/encode_json.py,sha256=twBZi0ZM7t29nRuoKxKSh2wctThpQEnYN_p-ii_bSvw,514
+rest_framework_mcp/output/encode_toon.py,sha256=6DWyiS5IxY9LDCX1CvrRdselxiWThY7QIDxLiczZeC4,969
+rest_framework_mcp/output/format.py,sha256=ID1D0lKEXaMW4LAoC0F8it4AJyJkPrcnnyjbV00PEz8,1007
+rest_framework_mcp/output/tool_result.py,sha256=_u_zSZmuP-o0KmNYJG6WwjkzgIURbpMoBMBZLLwhfhM,2142
+rest_framework_mcp/protocol/__init__.py,sha256=_O78Qb5aL5E6n_tECZY3nwageVB73Tv81RfCYA07Tes,2050
+rest_framework_mcp/protocol/client_capabilities.py,sha256=ghkzIzY0IttelkscysL7OPxMLO8xXTzWD9_igTMjZfM,1000
+rest_framework_mcp/protocol/get_prompt_result.py,sha256=2viUdc3IgSWGofeAjBcxuHTAFoMs6C2UfOAQ0TLMK_w,784
+rest_framework_mcp/protocol/implementation.py,sha256=58Mx94i4cH6-6m9ughnWrhTYSHkN33TsgOLMVYS5cX4,368
+rest_framework_mcp/protocol/initialize_params.py,sha256=svvmSD2UjG7KARtNuHSEkzMP6yE3ieRtMXMnCRmk9sI,1229
+rest_framework_mcp/protocol/initialize_result.py,sha256=IkFeVlibYhGPW5LISnqro-aa8CUIzD6GqJHjBbmkSmM,882
+rest_framework_mcp/protocol/json_rpc_error.py,sha256=Q3-cJaB7buooOnMzXjulGll0lSLEbc4CHXclwCm1gKE,616
+rest_framework_mcp/protocol/json_rpc_error_code.py,sha256=KIcdOebBg8PBtz-B8l8puq_BXHBBtEQ8LQ_VI0PrVgo,788
+rest_framework_mcp/protocol/json_rpc_message.py,sha256=ngDRdEyiiufZ4I0mmW9hXNmK_FJL4HS3JGRsGgnWAnA,367
+rest_framework_mcp/protocol/json_rpc_notification.py,sha256=jd3ewvMHI8RMDhwScfCwlyA3pyDV-0_JpbnEsclm0GY,650
+rest_framework_mcp/protocol/json_rpc_request.py,sha256=VSjIYkS7qBDr7FC5qX8P_KHZLCV8pyHN28pX6JY8byg,681
+rest_framework_mcp/protocol/json_rpc_response.py,sha256=KVCKI9nVMUvPaCAhEIA0Y5kBd-ODuEbMUP7_QNlHuag,794
+rest_framework_mcp/protocol/jsonrpc_constants.py,sha256=Qn4GfX4OFhvTI42f2pCWCoDUxoPG7_mkvXAUi_WMxiw,139
+rest_framework_mcp/protocol/parse_message.py,sha256=2Ikuj8pA8pXpZBNRfOyoet-NXpjbbka2_6JhEbFlJwc,2158
+rest_framework_mcp/protocol/prompt.py,sha256=b6NA1DdFp_VZlw05k9EhiXKdelqjPvksAQqxCJIFxn4,1183
+rest_framework_mcp/protocol/prompt_argument.py,sha256=aqjEgl3KnsraUnAIHSKhT-1KVht-wnFjTh4Ft_msGPE,776
+rest_framework_mcp/protocol/prompt_message.py,sha256=54yo60M1Q95Jh7Z5p-5HXm30qhIkLGt25WEii6SBqSI,877
+rest_framework_mcp/protocol/resource.py,sha256=anoG5VxftA4iIl6DXK8naFk100mwqUmYdHMkv0nZj0Q,1120
+rest_framework_mcp/protocol/resource_contents.py,sha256=mDmvMfRFDNV6NwkCzE5hmRNYCz1gBJyvXxlPI_9OSdM,788
+rest_framework_mcp/protocol/resource_template.py,sha256=MKC_3gkOaqpBHp-qq-1rPnw2LkH6sYLSvaGGoPlZhyA,1051
+rest_framework_mcp/protocol/server_capabilities.py,sha256=AcpDmFEZK4rLZnxpneWfWb-OvLl4kKUcK370TZpWr-0,1251
+rest_framework_mcp/protocol/tool.py,sha256=o-vZzmcNWn4V_MTGayfxaNpqxoRgsT-SLlFYSnn5bRg,1167
+rest_framework_mcp/protocol/tool_content_block.py,sha256=nZl3ISv84lBQXWrNjtCDaBkMFbHGiyPyc9L8Jw7dqZs,967
+rest_framework_mcp/protocol/tool_result.py,sha256=LxpEETicsO6AE8iiHjw3Vt48iuw07AYkDL2WBT4Va6Y,1177
+rest_framework_mcp/registry/__init__.py,sha256=1aRIry_tvYAPy3sq5f370lews9aCfFAF3aOKa74KzjY,362
+rest_framework_mcp/registry/prompt_binding.py,sha256=j7QhO0Bej_6I-rEmva36aK2UZhPMAOc1Wy5_P4ZurCA,1160
+rest_framework_mcp/registry/prompt_registry.py,sha256=vBq2jWbBqFt4uu-wEZLHSZXfrpBzAHME0k8HCVsXfD4,979
+rest_framework_mcp/registry/resource_binding.py,sha256=KFqoSmhCYO1Ebame-Pn6ieFst3_KyxyXuv5v8uo7TPA,2132
+rest_framework_mcp/registry/resource_registry.py,sha256=6TEUie7VqotovupzgYKj5bC14pSkdniQt57OgmGKANA,2384
+rest_framework_mcp/registry/tool_binding.py,sha256=hgZ6XbLJugvUUt_NIXWlpDO-hSiWxd-g6bM6fUhAb3o,1618
+rest_framework_mcp/registry/tool_registry.py,sha256=SLKDC13Tt1pRru3qyE91Pxr-E9qqiEsr73m6B2YyE9g,1024
+rest_framework_mcp/schema/__init__.py,sha256=3aSBm_fQZCAzoo1PwkeOdOjNZRFI0hymmWjRilf-CPc,199
+rest_framework_mcp/schema/input_schema.py,sha256=BuZKGcXtASAInHnBJoJ8U0_86czW1u8imxTlYrQQRLU,1114
+rest_framework_mcp/schema/output_schema.py,sha256=27TDSpK8TwbveK6KcebiiATHqGld509Fu3AjMJAbAgI,957
+rest_framework_mcp/schema/utils.py,sha256=MbclhlI1mZAOPAUSzMtcYVuI96h4ijbx4uHAl7kDO3c,5351
+rest_framework_mcp/server/__init__.py,sha256=qyAGvV1tEYwY5fV9ZB4NYNa1dOw1XjULcGbqLyIZjO4,84
+rest_framework_mcp/server/mcp_server.py,sha256=7_hxTyQWtE6I6oloVIdbhxC4Kr6qXwYirzglJboFcYc,17484
+rest_framework_mcp/server/mcp_service_view.py,sha256=AlMaDKW1TZFAYDQGd9YRwPiaoItWMxAjbeTg0u-LkPg,1209
+rest_framework_mcp/transport/__init__.py,sha256=oT8Cqwypxpf9iPbE5XDK8SvC2u5gKYGsQuHFg_FaCcU,971
+rest_framework_mcp/transport/async_streamable_http_view.py,sha256=Eo3-O1SJCBeYPjIGLiu52GX2q7FgI-HWVd07oJu7p50,11906
+rest_framework_mcp/transport/django_cache_session_store.py,sha256=bW01KyNTV_nZGPWYYHVEFr5tsoWHTkzaFlrr2ErP6UU,958
+rest_framework_mcp/transport/in_memory_session_store.py,sha256=Q5ukRmja7sOJgjWC-wuLQqhd5zbvyBQuatEjgYHFfNk,813
+rest_framework_mcp/transport/in_memory_sse_broker.py,sha256=HjsvAsGDY8OK8i7ZwGKxoBTpppEg2E5z-YLzSCMXdhA,2510
+rest_framework_mcp/transport/in_memory_sse_replay_buffer.py,sha256=ddzXKyKaOjyJcQY3aoXlT5Xq7rnF1dBzVnf7EH0Flx8,2945
+rest_framework_mcp/transport/origin_validation.py,sha256=_m94RAetv29FCwae_NedVbh3tUgxTa9EuGyqF2P5wDA,946
+rest_framework_mcp/transport/protocol_version.py,sha256=KVMUl6ICt71LFVFqqPza1lN8phUqD5r4HyqRsnVokhw,876
+rest_framework_mcp/transport/redis_sse_broker.py,sha256=AIl2ECImrdRqzsWV-FsBRrDH1MFSGDr3x9TLG-DvfRw,6966
+rest_framework_mcp/transport/redis_sse_replay_buffer.py,sha256=vbMtYPG-EeqI4f-24ohyadKo9S2q8tBga4EcA-iagjQ,4593
+rest_framework_mcp/transport/session_store.py,sha256=Iq1BqabhkeSvtXqPyjxDaI6B_7LBAP50r1g62qvQ1TE,811
+rest_framework_mcp/transport/sse_broker.py,sha256=NA7DzYy22Wl3xlxUADmIb7sZ8A0wN00JeT22N4wWFMY,1481
+rest_framework_mcp/transport/sse_replay_buffer.py,sha256=bbH2AHKCHZbnS3w1oMJf_augdlKkgrMjS_8-syUrPNw,2921
+rest_framework_mcp/transport/sse_response.py,sha256=-mHL-FAauz5MRCayB-B2yqnSBtIYfxtovMW91or8MTU,4420
+rest_framework_mcp/transport/streamable_http_view.py,sha256=lNS33UcoU5zHqQFG1oBf_hnnUOWK0_ouBeolVJaRc0M,9408
+djangorestframework_mcp_server-0.1.0.dist-info/METADATA,sha256=KZBVuSGEkjOynVH9xqwBWyQrZY7ui6H6ebzQVxn7H24,6092
+djangorestframework_mcp_server-0.1.0.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
+djangorestframework_mcp_server-0.1.0.dist-info/licenses/LICENSE,sha256=0rCDnUPa87Fm67SxYMrdqEdLV6UiMENH6NCPLZ_KT5M,1068
+djangorestframework_mcp_server-0.1.0.dist-info/RECORD,,

djangorestframework_mcp_server-0.1.0.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: hatchling 1.29.0
+Root-Is-Purelib: true
+Tag: py3-none-any

djangorestframework_mcp_server-0.1.0.dist-info/licenses/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Artur Veres
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

rest_framework_mcp/__init__.py

@@ -0,0 +1,80 @@
+# Re-exports from the sister package — provided here so MCP consumers don't
+# need to know which sub-package each symbol lives in. The dependency on
+# ``djangorestframework-services`` is mandatory anyway, so this is purely an
+# ergonomic convenience.
+from rest_framework_services.selectors.list_selector import ListSelector
+from rest_framework_services.selectors.output_selector import OutputSelector
+from rest_framework_services.selectors.retrieve_selector import RetrieveSelector
+from rest_framework_services.selectors.strict_list_selector import StrictListSelector
+from rest_framework_services.selectors.strict_output_selector import StrictOutputSelector
+from rest_framework_services.selectors.strict_retrieve_selector import StrictRetrieveSelector
+from rest_framework_services.services.create_service import CreateService
+from rest_framework_services.services.delete_service import DeleteService
+from rest_framework_services.services.strict_create_service import StrictCreateService
+from rest_framework_services.services.strict_delete_service import StrictDeleteService
+from rest_framework_services.services.strict_update_service import StrictUpdateService
+from rest_framework_services.services.update_service import UpdateService
+from rest_framework_services.types.selector_spec import SelectorSpec
+from rest_framework_services.types.service_spec import ServiceSpec
+from rest_framework_services.types.service_view import ServiceView
+
+from rest_framework_mcp.auth.auth_backend import MCPAuthBackend
+from rest_framework_mcp.auth.permissions.django_perm_required import DjangoPermRequired
+from rest_framework_mcp.auth.permissions.mcp_permission import MCPPermission
+from rest_framework_mcp.auth.permissions.scope_required import ScopeRequired
+from rest_framework_mcp.auth.token_info import TokenInfo
+from rest_framework_mcp.output.format import OutputFormat
+from rest_framework_mcp.protocol.prompt_argument import PromptArgument
+from rest_framework_mcp.protocol.prompt_message import PromptMessage
+from rest_framework_mcp.registry.prompt_registry import PromptRegistry
+from rest_framework_mcp.registry.resource_registry import ResourceRegistry
+from rest_framework_mcp.registry.tool_registry import ToolRegistry
+from rest_framework_mcp.server.mcp_server import MCPServer
+from rest_framework_mcp.server.mcp_service_view import MCPServiceView
+from rest_framework_mcp.transport.django_cache_session_store import DjangoCacheSessionStore
+from rest_framework_mcp.transport.in_memory_session_store import InMemorySessionStore
+from rest_framework_mcp.transport.in_memory_sse_broker import InMemorySSEBroker
+from rest_framework_mcp.transport.in_memory_sse_replay_buffer import InMemorySSEReplayBuffer
+from rest_framework_mcp.transport.session_store import SessionStore
+from rest_framework_mcp.transport.sse_broker import SSEBroker
+from rest_framework_mcp.transport.sse_replay_buffer import SSEReplayBuffer
+from rest_framework_mcp.version import __version__
+
+__all__ = [
+    "CreateService",
+    "DeleteService",
+    "DjangoCacheSessionStore",
+    "DjangoPermRequired",
+    "InMemorySSEBroker",
+    "InMemorySSEReplayBuffer",
+    "InMemorySessionStore",
+    "ListSelector",
+    "MCPAuthBackend",
+    "MCPPermission",
+    "MCPServer",
+    "MCPServiceView",
+    "OutputFormat",
+    "OutputSelector",
+    "PromptArgument",
+    "PromptMessage",
+    "PromptRegistry",
+    "ResourceRegistry",
+    "RetrieveSelector",
+    "SSEBroker",
+    "SSEReplayBuffer",
+    "ScopeRequired",
+    "SelectorSpec",
+    "ServiceSpec",
+    "ServiceView",
+    "SessionStore",
+    "StrictCreateService",
+    "StrictDeleteService",
+    "StrictListSelector",
+    "StrictOutputSelector",
+    "StrictRetrieveSelector",
+    "StrictUpdateService",
+    "TokenInfo",
+    "ToolRegistry",
+    "UpdateService",
+    "__version__",
+]

rest_framework_mcp/_compat/__init__.py

@@ -0,0 +1,3 @@
+from rest_framework_mcp._compat.acall import acall
+
+__all__ = ["acall"]

rest_framework_mcp/_compat/acall.py

@@ -0,0 +1,28 @@
+from __future__ import annotations
+
+import inspect
+from collections.abc import Callable
+from typing import Any
+
+from asgiref.sync import sync_to_async
+
+
+async def acall(fn: Callable[..., Any], *args: Any, **kwargs: Any) -> Any:
+    """Invoke ``fn`` from async code regardless of whether it's async or sync.
+
+    Async callables are awaited directly; sync callables are dispatched to a
+    thread via :func:`asgiref.sync.sync_to_async` so they don't block the
+    event loop. This is the bridge the async transport uses for collaborators
+    (auth backend, session store, custom permissions) that are not required
+    to be async-native.
+
+    Consumers writing genuinely async backends just declare their methods
+    ``async def`` — :func:`inspect.iscoroutinefunction` picks that up at
+    runtime, and the thread hop is skipped.
+    """
+    if inspect.iscoroutinefunction(fn):
+        return await fn(*args, **kwargs)
+    return await sync_to_async(fn)(*args, **kwargs)
+
+
+__all__ = ["acall"]

rest_framework_mcp/_compat/tracing.py

@@ -0,0 +1,63 @@
+from __future__ import annotations
+
+import importlib
+from collections.abc import Iterator
+from contextlib import contextmanager
+from typing import Any
+
+
+# OpenTelemetry is an optional extra; the package must remain usable without
+# it. Resolve the trace module via ``importlib`` so the binding is plain
+# ``Any`` (or ``None``) — no narrowing for the type checker to fight, and
+# the no-extras smoke job still exercises the ``None`` fallback.
+def _resolve_otel_trace() -> Any:
+    try:
+        return importlib.import_module("opentelemetry.trace")
+    except ImportError:  # pragma: no cover - exercised by the no-extras smoke job
+        return None
+
+
+_otel_trace: Any = _resolve_otel_trace()
+
+# Tracer name follows the package's import path so OTel collectors can group
+# spans coherently. ``__version__`` is included so users can correlate trace
+# data with a specific release.
+_TRACER_NAME: str = "rest_framework_mcp"
+
+
+class _NoopSpan:
+    """Fallback span used when ``opentelemetry`` is not installed.
+
+    Mirrors the subset of the OTel ``Span`` API the handlers use:
+    ``set_attribute``, ``set_status``, ``record_exception``. Every method is
+    a no-op so caller code stays branch-free.
+    """
+
+    def set_attribute(self, key: str, value: Any) -> None:
+        return None
+
+    def set_status(self, status: Any) -> None:
+        return None
+
+    def record_exception(self, exc: BaseException) -> None:
+        return None
+
+
+@contextmanager
+def span(name: str, attributes: dict[str, Any] | None = None) -> Iterator[Any]:
+    """Start an MCP span; no-op if OpenTelemetry isn't installed.
+
+    ``name`` follows the convention ``mcp.<method>`` (``mcp.tools.call``,
+    ``mcp.resources.read``, ``mcp.prompts.get``). Attributes are set on the
+    span at start time; handlers can grab the yielded span object to record
+    additional fields (binding name, error code, etc.) before exit.
+    """
+    if _otel_trace is None:
+        yield _NoopSpan()
+        return
+    tracer = _otel_trace.get_tracer(_TRACER_NAME)
+    with tracer.start_as_current_span(name, attributes=attributes or {}) as otel_span:
+        yield otel_span
+
+
+__all__ = ["span"]

rest_framework_mcp/_compat/utils.py

@@ -0,0 +1,39 @@
+from __future__ import annotations
+
+from collections.abc import Callable
+from typing import Any
+
+from rest_framework_services._compat.arun_service import arun_service
+from rest_framework_services._compat.is_async import is_async
+from rest_framework_services._compat.run_service import run_service
+from rest_framework_services.selectors.utils import arun_selector, run_selector
+
+from rest_framework_mcp._compat.acall import acall
+
+# These thin wrappers exist because the sister repo's `arun_service` /
+# `arun_selector` route sync callables in ways that don't compose cleanly with
+# the Django async ORM:
+#   - `arun_service` with atomic=True wraps the callable in `async_to_sync`,
+#     which only works for async callables (sync ones raise "can't be awaited").
+#   - `arun_selector` runs sync callables inline, so any ORM call inside them
+#     raises `SynchronousOnlyOperation` under an event loop.
+# Both helpers below detect sync vs async at the boundary and route through
+# `sync_to_async` (via :func:`acall`) for the sync branch — preserving native
+# async-dispatch performance for genuinely async services and selectors.
+
+
+async def arun_service_sync_safe(
+    fn: Callable[..., Any], kwargs: dict[str, Any], *, atomic: bool
+) -> Any:
+    if is_async(fn):
+        return await arun_service(fn, kwargs, atomic=atomic)
+    return await acall(run_service, fn, kwargs, atomic=atomic)
+
+
+async def arun_selector_sync_safe(fn: Callable[..., Any], kwargs: dict[str, Any]) -> Any:
+    if is_async(fn):
+        return await arun_selector(fn, kwargs)
+    return await acall(run_selector, fn, kwargs)
+
+
+__all__ = ["arun_selector_sync_safe", "arun_service_sync_safe"]

rest_framework_mcp/adapters/__init__.py

@@ -0,0 +1,4 @@
+from rest_framework_mcp.adapters.selector_to_resource import selector_to_resource
+from rest_framework_mcp.adapters.service_to_tool import service_spec_to_tool
+
+__all__ = ["selector_to_resource", "service_spec_to_tool"]

rest_framework_mcp/adapters/selector_to_resource.py

@@ -0,0 +1,71 @@
+from __future__ import annotations
+
+from collections.abc import Callable
+from typing import Any
+
+from rest_framework_services.types.selector_spec import SelectorSpec
+
+from rest_framework_mcp.registry.resource_binding import ResourceBinding
+
+
+def selector_to_resource(
+    *,
+    name: str,
+    uri_template: str,
+    selector: SelectorSpec,
+    description: str | None = None,
+    title: str | None = None,
+    output_serializer: type | None = None,
+    mime_type: str = "application/json",
+    permissions: tuple[Any, ...] = (),
+    rate_limits: tuple[Any, ...] = (),
+    annotations: dict[str, Any] | None = None,
+) -> ResourceBinding:
+    """Lift a :class:`SelectorSpec` into a :class:`ResourceBinding`.
+
+    Mirrors :func:`service_spec_to_tool` — the unit of registration is always
+    a spec from ``djangorestframework-services``. ``.selector`` must be set
+    (a spec with ``selector=None`` is rejected because there's nothing to
+    dispatch to), ``.output_serializer`` fills in when the caller didn't pass
+    one explicitly, and ``.kwargs`` becomes the binding's per-request kwargs
+    provider.
+
+    The selector is dispatched at ``resources/read`` time via
+    ``run_selector`` / ``arun_selector`` so async selectors work
+    transparently.
+    """
+    if not isinstance(selector, SelectorSpec):
+        raise TypeError(
+            f"register_resource(selector=...) requires a SelectorSpec; got "
+            f"{type(selector).__name__}. Wrap your callable in "
+            f"`SelectorSpec(selector=fn)` (or use the @server.resource "
+            f"decorator, which wraps the function automatically)."
+        )
+    if selector.selector is None:
+        raise ValueError(
+            f"SelectorSpec for resource {name!r} has selector=None — MCP needs a "
+            "concrete callable to dispatch to."
+        )
+    # Spec values fill in caller-omitted kwargs. We don't override
+    # explicit caller args because those represent intentional choices.
+    resolved_callable: Callable[..., Any] = selector.selector
+    if output_serializer is None:
+        output_serializer = selector.output_serializer
+    kwargs_provider = selector.kwargs
+
+    return ResourceBinding(
+        name=name,
+        uri_template=uri_template,
+        description=description,
+        title=title,
+        selector=resolved_callable,
+        output_serializer=output_serializer,
+        mime_type=mime_type,
+        permissions=permissions,
+        rate_limits=rate_limits,
+        annotations=annotations or {},
+        kwargs_provider=kwargs_provider,
+    )
+
+
+__all__ = ["selector_to_resource"]

rest_framework_mcp/adapters/service_to_tool.py

@@ -0,0 +1,40 @@
+from __future__ import annotations
+
+from typing import Any
+
+from rest_framework_services.types.service_spec import ServiceSpec
+
+from rest_framework_mcp.output.format import OutputFormat
+from rest_framework_mcp.registry.tool_binding import ToolBinding
+
+
+def service_spec_to_tool(
+    *,
+    name: str,
+    spec: ServiceSpec,
+    description: str | None = None,
+    title: str | None = None,
+    output_format: OutputFormat = OutputFormat.JSON,
+    permissions: tuple[Any, ...] = (),
+    rate_limits: tuple[Any, ...] = (),
+    annotations: dict[str, Any] | None = None,
+) -> ToolBinding:
+    """Lift a ``ServiceSpec`` into a :class:`ToolBinding`.
+
+    Pure projection — no side effects on the spec or its callable. The
+    handler layer (``handlers/handle_tools_call.py``) is what eventually
+    invokes ``spec.service``.
+    """
+    return ToolBinding(
+        name=name,
+        description=description,
+        title=title,
+        spec=spec,
+        output_format=output_format,
+        permissions=permissions,
+        rate_limits=rate_limits,
+        annotations=annotations or {},
+    )
+
+
+__all__ = ["service_spec_to_tool"]

rest_framework_mcp/auth/__init__.py

@@ -0,0 +1,19 @@
+from rest_framework_mcp.auth.auth_backend import MCPAuthBackend
+from rest_framework_mcp.auth.insufficient_scope_response import build_insufficient_scope_response
+from rest_framework_mcp.auth.permissions.django_perm_required import DjangoPermRequired
+from rest_framework_mcp.auth.permissions.mcp_permission import MCPPermission
+from rest_framework_mcp.auth.permissions.scope_required import ScopeRequired
+from rest_framework_mcp.auth.protected_resource_metadata import ProtectedResourceMetadataView
+from rest_framework_mcp.auth.token_info import TokenInfo
+from rest_framework_mcp.auth.unauthenticated_response import build_unauthenticated_response
+
+__all__ = [
+    "DjangoPermRequired",
+    "MCPAuthBackend",
+    "MCPPermission",
+    "ProtectedResourceMetadataView",
+    "ScopeRequired",
+    "TokenInfo",
+    "build_insufficient_scope_response",
+    "build_unauthenticated_response",
+]