localmcplib 0.1.3__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -0,0 +1,207 @@
1
+ Apache License Version 2.0
2
+
3
+ Copyright (c) 2026 Salesforce, Inc.
4
+ All rights reserved.
5
+
6
+ Apache License
7
+ Version 2.0, January 2004
8
+ http://www.apache.org/licenses/
9
+
10
+ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
11
+
12
+ 1. Definitions.
13
+
14
+ "License" shall mean the terms and conditions for use, reproduction,
15
+ and distribution as defined by Sections 1 through 9 of this document.
16
+
17
+ "Licensor" shall mean the copyright owner or entity authorized by
18
+ the copyright owner that is granting the License.
19
+
20
+ "Legal Entity" shall mean the union of the acting entity and all
21
+ other entities that control, are controlled by, or are under common
22
+ control with that entity. For the purposes of this definition,
23
+ "control" means (i) the power, direct or indirect, to cause the
24
+ direction or management of such entity, whether by contract or
25
+ otherwise, or (ii) ownership of fifty percent (50%) or more of the
26
+ outstanding shares, or (iii) beneficial ownership of such entity.
27
+
28
+ "You" (or "Your") shall mean an individual or Legal Entity
29
+ exercising permissions granted by this License.
30
+
31
+ "Source" form shall mean the preferred form for making modifications,
32
+ including but not limited to software source code, documentation
33
+ source, and configuration files.
34
+
35
+ "Object" form shall mean any form resulting from mechanical
36
+ transformation or translation of a Source form, including but
37
+ not limited to compiled object code, generated documentation,
38
+ and conversions to other media types.
39
+
40
+ "Work" shall mean the work of authorship, whether in Source or
41
+ Object form, made available under the License, as indicated by a
42
+ copyright notice that is included in or attached to the work
43
+ (an example is provided in the Appendix below).
44
+
45
+ "Derivative Works" shall mean any work, whether in Source or Object
46
+ form, that is based on (or derived from) the Work and for which the
47
+ editorial revisions, annotations, elaborations, or other modifications
48
+ represent, as a whole, an original work of authorship. For the purposes
49
+ of this License, Derivative Works shall not include works that remain
50
+ separable from, or merely link (or bind by name) to the interfaces of,
51
+ the Work and Derivative Works thereof.
52
+
53
+ "Contribution" shall mean any work of authorship, including
54
+ the original version of the Work and any modifications or additions
55
+ to that Work or Derivative Works thereof, that is intentionally
56
+ submitted to Licensor for inclusion in the Work by the copyright owner
57
+ or by an individual or Legal Entity authorized to submit on behalf of
58
+ the copyright owner. For the purposes of this definition, "submitted"
59
+ means any form of electronic, verbal, or written communication sent
60
+ to the Licensor or its representatives, including but not limited to
61
+ communication on electronic mailing lists, source code control systems,
62
+ and issue tracking systems that are managed by, or on behalf of, the
63
+ Licensor for the purpose of discussing and improving the Work, but
64
+ excluding communication that is conspicuously marked or otherwise
65
+ designated in writing by the copyright owner as "Not a Contribution."
66
+
67
+ "Contributor" shall mean Licensor and any individual or Legal Entity
68
+ on behalf of whom a Contribution has been received by Licensor and
69
+ subsequently incorporated within the Work.
70
+
71
+ 2. Grant of Copyright License. Subject to the terms and conditions of
72
+ this License, each Contributor hereby grants to You a perpetual,
73
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
74
+ copyright license to reproduce, prepare Derivative Works of,
75
+ publicly display, publicly perform, sublicense, and distribute the
76
+ Work and such Derivative Works in Source or Object form.
77
+
78
+ 3. Grant of Patent License. Subject to the terms and conditions of
79
+ this License, each Contributor hereby grants to You a perpetual,
80
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
81
+ (except as stated in this section) patent license to make, have made,
82
+ use, offer to sell, sell, import, and otherwise transfer the Work,
83
+ where such license applies only to those patent claims licensable
84
+ by such Contributor that are necessarily infringed by their
85
+ Contribution(s) alone or by combination of their Contribution(s)
86
+ with the Work to which such Contribution(s) was submitted. If You
87
+ institute patent litigation against any entity (including a
88
+ cross-claim or counterclaim in a lawsuit) alleging that the Work
89
+ or a Contribution incorporated within the Work constitutes direct
90
+ or contributory patent infringement, then any patent licenses
91
+ granted to You under this License for that Work shall terminate
92
+ as of the date such litigation is filed.
93
+
94
+ 4. Redistribution. You may reproduce and distribute copies of the
95
+ Work or Derivative Works thereof in any medium, with or without
96
+ modifications, and in Source or Object form, provided that You
97
+ meet the following conditions:
98
+
99
+ (a) You must give any other recipients of the Work or
100
+ Derivative Works a copy of this License; and
101
+
102
+ (b) You must cause any modified files to carry prominent notices
103
+ stating that You changed the files; and
104
+
105
+ (c) You must retain, in the Source form of any Derivative Works
106
+ that You distribute, all copyright, patent, trademark, and
107
+ attribution notices from the Source form of the Work,
108
+ excluding those notices that do not pertain to any part of
109
+ the Derivative Works; and
110
+
111
+ (d) If the Work includes a "NOTICE" text file as part of its
112
+ distribution, then any Derivative Works that You distribute must
113
+ include a readable copy of the attribution notices contained
114
+ within such NOTICE file, excluding those notices that do not
115
+ pertain to any part of the Derivative Works, in at least one
116
+ of the following places: within a NOTICE text file distributed
117
+ as part of the Derivative Works; within the Source form or
118
+ documentation, if provided along with the Derivative Works; or,
119
+ within a display generated by the Derivative Works, if and
120
+ wherever such third-party notices normally appear. The contents
121
+ of the NOTICE file are for informational purposes only and
122
+ do not modify the License. You may add Your own attribution
123
+ notices within Derivative Works that You distribute, alongside
124
+ or as an addendum to the NOTICE text from the Work, provided
125
+ that such additional attribution notices cannot be construed
126
+ as modifying the License.
127
+
128
+ You may add Your own copyright statement to Your modifications and
129
+ may provide additional or different license terms and conditions
130
+ for use, reproduction, or distribution of Your modifications, or
131
+ for any such Derivative Works as a whole, provided Your use,
132
+ reproduction, and distribution of the Work otherwise complies with
133
+ the conditions stated in this License.
134
+
135
+ 5. Submission of Contributions. Unless You explicitly state otherwise,
136
+ any Contribution intentionally submitted for inclusion in the Work
137
+ by You to the Licensor shall be under the terms and conditions of
138
+ this License, without any additional terms or conditions.
139
+ Notwithstanding the above, nothing herein shall supersede or modify
140
+ the terms of any separate license agreement you may have executed
141
+ with Licensor regarding such Contributions.
142
+
143
+ 6. Trademarks. This License does not grant permission to use the trade
144
+ names, trademarks, service marks, or product names of the Licensor,
145
+ except as required for reasonable and customary use in describing the
146
+ origin of the Work and reproducing the content of the NOTICE file.
147
+
148
+ 7. Disclaimer of Warranty. Unless required by applicable law or
149
+ agreed to in writing, Licensor provides the Work (and each
150
+ Contributor provides its Contributions) on an "AS IS" BASIS,
151
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
152
+ implied, including, without limitation, any warranties or conditions
153
+ of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
154
+ PARTICULAR PURPOSE. You are solely responsible for determining the
155
+ appropriateness of using or redistributing the Work and assume any
156
+ risks associated with Your exercise of permissions under this License.
157
+
158
+ 8. Limitation of Liability. In no event and under no legal theory,
159
+ whether in tort (including negligence), contract, or otherwise,
160
+ unless required by applicable law (such as deliberate and grossly
161
+ negligent acts) or agreed to in writing, shall any Contributor be
162
+ liable to You for damages, including any direct, indirect, special,
163
+ incidental, or consequential damages of any character arising as a
164
+ result of this License or out of the use or inability to use the
165
+ Work (including but not limited to damages for loss of goodwill,
166
+ work stoppage, computer failure or malfunction, or any and all
167
+ other commercial damages or losses), even if such Contributor
168
+ has been advised of the possibility of such damages.
169
+
170
+ 9. Accepting Warranty or Additional Liability. While redistributing
171
+ the Work or Derivative Works thereof, You may choose to offer,
172
+ and charge a fee for, acceptance of support, warranty, indemnity,
173
+ or other liability obligations and/or rights consistent with this
174
+ License. However, in accepting such obligations, You may act only
175
+ on Your own behalf and on Your sole responsibility, not on behalf
176
+ of any other Contributor, and only if You agree to indemnify,
177
+ defend, and hold each Contributor harmless for any liability
178
+ incurred by, or claims asserted against, such Contributor by reason
179
+ of your accepting any such warranty or additional liability.
180
+
181
+ END OF TERMS AND CONDITIONS
182
+
183
+ APPENDIX: How to apply the Apache License to your work.
184
+
185
+ To apply the Apache License to your work, attach the following
186
+ boilerplate notice, with the fields enclosed by brackets "{}"
187
+ replaced with your own identifying information. (Don't include
188
+ the brackets!) The text should be enclosed in the appropriate
189
+ comment syntax for the file format. We also recommend that a
190
+ file or class name and description of purpose be included on the
191
+ same "printed page" as the copyright notice for easier
192
+ identification within third-party archives.
193
+
194
+ Copyright {yyyy} {name of copyright owner}
195
+
196
+ Licensed under the Apache License, Version 2.0 (the "License");
197
+ you may not use this file except in compliance with the License.
198
+ You may obtain a copy of the License at
199
+
200
+ http://www.apache.org/licenses/LICENSE-2.0
201
+
202
+ Unless required by applicable law or agreed to in writing, software
203
+ distributed under the License is distributed on an "AS IS" BASIS,
204
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
205
+ See the License for the specific language governing permissions and
206
+ limitations under the License.
207
+
@@ -0,0 +1,247 @@
1
+ Metadata-Version: 2.4
2
+ Name: localmcplib
3
+ Version: 0.1.3
4
+ Summary: Reusable foundations for local stdio MCP servers.
5
+ Author: Demian Brecht
6
+ Author-email: Demian Brecht <dbrecht@salesforce.com>
7
+ License-Expression: Apache-2.0
8
+ License-File: LICENSE.txt
9
+ Classifier: Development Status :: 3 - Alpha
10
+ Classifier: License :: OSI Approved :: Apache Software License
11
+ Classifier: Programming Language :: Python :: 3.12
12
+ Classifier: Topic :: Software Development :: Libraries :: Python Modules
13
+ Requires-Dist: aiosqlite>=0.22.1 ; extra == 'all'
14
+ Requires-Dist: fastmcp>=4.0.5 ; extra == 'all'
15
+ Requires-Dist: httpx2>=2.13.0 ; extra == 'all'
16
+ Requires-Dist: keyring>=25.7.0 ; extra == 'all'
17
+ Requires-Dist: langchain-anthropic>=1.7.2 ; extra == 'all'
18
+ Requires-Dist: langchain-core>=1.6.4 ; extra == 'all'
19
+ Requires-Dist: langchain-openai>=1.6.3 ; extra == 'all'
20
+ Requires-Dist: langfuse>=4.15.4,<5 ; extra == 'all'
21
+ Requires-Dist: langgraph-checkpoint-sqlite>=3.1.1 ; extra == 'all'
22
+ Requires-Dist: pydantic>=2.13.5 ; extra == 'all'
23
+ Requires-Dist: structlog>=26.1.0 ; extra == 'all'
24
+ Requires-Dist: httpx2>=2.13.0 ; extra == 'llm'
25
+ Requires-Dist: langchain-anthropic>=1.7.2 ; extra == 'llm'
26
+ Requires-Dist: langchain-openai>=1.6.3 ; extra == 'llm'
27
+ Requires-Dist: structlog>=26.1.0 ; extra == 'observability'
28
+ Requires-Dist: langchain-core>=1.6.4 ; extra == 'sandbox'
29
+ Requires-Dist: pydantic>=2.13.5 ; extra == 'sandbox'
30
+ Requires-Dist: keyring>=25.7.0 ; extra == 'secrets'
31
+ Requires-Dist: fastmcp>=4.0.5 ; extra == 'server'
32
+ Requires-Dist: httpx2>=2.13.0 ; extra == 'server'
33
+ Requires-Dist: keyring>=25.7.0 ; extra == 'server'
34
+ Requires-Dist: langchain-anthropic>=1.7.2 ; extra == 'server'
35
+ Requires-Dist: langchain-openai>=1.6.3 ; extra == 'server'
36
+ Requires-Dist: structlog>=26.1.0 ; extra == 'server'
37
+ Requires-Dist: fastmcp>=4.0.5 ; extra == 'telemetry'
38
+ Requires-Dist: langfuse>=4.15.4,<5 ; extra == 'telemetry'
39
+ Requires-Dist: structlog>=26.1.0 ; extra == 'telemetry'
40
+ Requires-Dist: aiosqlite>=0.22.1 ; extra == 'workflows'
41
+ Requires-Dist: langgraph-checkpoint-sqlite>=3.1.1 ; extra == 'workflows'
42
+ Requires-Dist: structlog>=26.1.0 ; extra == 'workflows'
43
+ Maintainer: Demian Brecht
44
+ Maintainer-email: Demian Brecht <dbrecht@salesforce.com>
45
+ Requires-Python: >=3.12
46
+ Project-URL: Homepage, https://github.com/salesforce-misc/localmcplib
47
+ Project-URL: Repository, https://github.com/salesforce-misc/localmcplib
48
+ Project-URL: Issues, https://github.com/salesforce-misc/localmcplib/issues
49
+ Provides-Extra: all
50
+ Provides-Extra: llm
51
+ Provides-Extra: observability
52
+ Provides-Extra: sandbox
53
+ Provides-Extra: secrets
54
+ Provides-Extra: server
55
+ Provides-Extra: telemetry
56
+ Provides-Extra: workflows
57
+ Description-Content-Type: text/markdown
58
+
59
+ # localmcplib
60
+
61
+ `localmcplib` is a Python foundation for local MCP servers that run over
62
+ stdio. It packages the infrastructure that tends to be repeated across serious
63
+ local servers while leaving tools, prompts, application schemas, and product
64
+ behavior to each application.
65
+
66
+ The published distribution is `localmcplib`; the Python import package is
67
+ `localmcp`.
68
+
69
+ ## Introduction
70
+
71
+ A local MCP server can start as a few tool functions, but production use adds a
72
+ surprising amount of non-domain work: stdout and stderr must remain clean for
73
+ JSON-RPC, credentials need safe lookup boundaries, configuration must compose
74
+ across servers, model connections need deployment-independent routing, and
75
+ long-running operations need lifecycle and recovery support. Model-controlled
76
+ local commands also need an actual security boundary.
77
+
78
+ `localmcplib` owns these reusable mechanics while consuming servers continue
79
+ to own their schemas, tools, service clients, prompts, and authorization
80
+ policy.
81
+
82
+ ## Quickstart
83
+
84
+ Install the integrated server capability:
85
+
86
+ ```console
87
+ uv add 'localmcplib[server]'
88
+ ```
89
+
90
+ The following complete `hello.py` registers one tool and runs it as a FastMCP
91
+ stdio server. `STDIOServer` loads and validates localmcplib's configuration;
92
+ applications only need a parser when they add their own configuration fields.
93
+
94
+ ```python
95
+ from fastmcp.tools import tool
96
+
97
+ import localmcp
98
+
99
+ NAME = "hello-mcp"
100
+
101
+
102
+ @tool
103
+ def hello(name: str = "world") -> str:
104
+ return f"Hello, {name}!"
105
+
106
+
107
+ # STDIOServer owns an application runtime so durable tasks and other resources
108
+ # share its startup/shutdown lifecycle. Hello has no such work, so this runtime
109
+ # intentionally does nothing.
110
+ class NoopRuntime:
111
+ def __init__(self, *_args: object, **_kwargs: object) -> None:
112
+ pass
113
+
114
+ async def start(self) -> None:
115
+ pass
116
+
117
+ async def close(self) -> None:
118
+ pass
119
+
120
+
121
+ server = localmcp.STDIOServer(
122
+ name=NAME,
123
+ tools=[hello],
124
+ runtime_factory=NoopRuntime,
125
+ )
126
+
127
+ if __name__ == "__main__":
128
+ localmcp.main(server)
129
+ ```
130
+
131
+ Create `~/.config/localmcp/localmcp.toml`:
132
+
133
+ ```toml
134
+ schema_version = 1
135
+
136
+ [llm]
137
+ backend = "openai_compatible"
138
+ base_url = "https://llm.example.test/v1"
139
+
140
+ [secrets.llm_api_key]
141
+ env_vars = ["HELLO_LLM_API_KEY"]
142
+ ```
143
+
144
+ Then run the server from an MCP client with `uv run python hello.py`. The
145
+ integrated server loads configuration and secrets, creates the model and
146
+ telemetry boundaries, owns the application runtime, registers the tool, and
147
+ serves it over stdio without writing logs to the protocol streams.
148
+
149
+ ## Features
150
+
151
+ ### Stdio MCP server composition
152
+
153
+ `localmcp.STDIOServer` assembles a FastMCP application from a server name, tool
154
+ list, and runtime factory. It owns startup and shutdown ordering, shared config
155
+ validation, secrets, model and telemetry wiring, per-server state paths,
156
+ file-only logging, and silent failure handling for stdout/stderr-safe operation.
157
+ Applications with additional configuration fields may supply an optional typed
158
+ `config_parser`; its result is passed to the runtime factory and lifespan.
159
+
160
+ ### Shared configuration and paths
161
+
162
+ One schema-versioned, XDG-aware `localmcp.toml` document provides shared
163
+ defaults. `[server.<name>]` recursively overlays those defaults for one logical
164
+ server. Applications choose the config file boundary and validate their own
165
+ effective schema; state, cache, and logs remain isolated per server.
166
+
167
+ See [docs/configuration.md](docs/configuration.md) for the document contract.
168
+
169
+ ### Secrets
170
+
171
+ Applications declare logical secret names in configuration without storing
172
+ secret values there. Resolution checks declared environment variables first,
173
+ then the operating-system keyring. Global secrets use the shared `localmcp`
174
+ keyring service; server-private secrets use `localmcp:<server-name>`. Resolved
175
+ values are redacted from string representations and errors.
176
+
177
+ ### LLM routing
178
+
179
+ Applications select logical model IDs independently of deployment routing. An
180
+ `openai_compatible` deployment can send models through a shared LiteLLM-style
181
+ endpoint, while a `native` deployment routes the same IDs to OpenAI or
182
+ Anthropic credentials. Gateway protocol dialect and native provider are
183
+ separate model properties, so switching deployment does not require changing
184
+ application model roles.
185
+
186
+ ### Sandboxing
187
+
188
+ The sandbox API provides bounded command execution with explicit filesystem
189
+ roots, a clean environment, output and time limits, process-group cleanup, and
190
+ network access disabled by default. The current implementation uses macOS
191
+ Seatbelt; the portable interface leaves room for a future Linux backend.
192
+
193
+ ### Durable workflows
194
+
195
+ The workflow package supplies LangGraph lifecycle management and a generic
196
+ SQLite operation catalog with ownership checks, recovery, worker leases,
197
+ heartbeats, cancellation, and durable tool-call budgets. Applications retain
198
+ responsibility for domain state, idempotency, and consequential side effects.
199
+
200
+ ### Observability
201
+
202
+ Structured logs are written to files only so they cannot corrupt stdio
203
+ JSON-RPC. Optional Langfuse integration adds failure-isolated tracing and
204
+ FastMCP middleware. Model and tool payload attributes are suppressed by
205
+ default. Set `LOCALMCP_LANGFUSE_CAPTURE_PAYLOADS=true` to capture model prompts,
206
+ model responses, tool arguments, and tool results. This opt-in can send secrets,
207
+ repository content, and other sensitive data to Langfuse; enable it only when
208
+ the configured Langfuse project is an approved destination for those payloads.
209
+
210
+ ## Capability extras
211
+
212
+ Install only what an application uses:
213
+
214
+ | Extra | Capability |
215
+ | --- | --- |
216
+ | `server` | Integrated FastMCP stdio application composition |
217
+ | `secrets` | OS-keyring secret resolution |
218
+ | `llm` | OpenAI-compatible and native OpenAI/Anthropic models |
219
+ | `sandbox` | Portable sandbox API and macOS Seatbelt implementation |
220
+ | `observability` | Structured file logging |
221
+ | `telemetry` | Langfuse and FastMCP telemetry integration |
222
+ | `workflows` | Durable LangGraph and SQLite workflow foundations |
223
+ | `all` | Every optional capability |
224
+
225
+ For example:
226
+
227
+ ```console
228
+ uv add 'localmcplib[server,sandbox,workflows]'
229
+ ```
230
+
231
+ ## Status
232
+
233
+ The API is alpha and may change as additional local MCP servers adopt the
234
+ library.
235
+
236
+ ## Development
237
+
238
+ Install the complete development environment and run the repository checks:
239
+
240
+ ```console
241
+ make install
242
+ make ci
243
+ make build
244
+ ```
245
+
246
+ Run `make help` to list the individual formatting, linting, type-checking,
247
+ testing, coverage, build, and cleanup targets.
@@ -0,0 +1,189 @@
1
+ # localmcplib
2
+
3
+ `localmcplib` is a Python foundation for local MCP servers that run over
4
+ stdio. It packages the infrastructure that tends to be repeated across serious
5
+ local servers while leaving tools, prompts, application schemas, and product
6
+ behavior to each application.
7
+
8
+ The published distribution is `localmcplib`; the Python import package is
9
+ `localmcp`.
10
+
11
+ ## Introduction
12
+
13
+ A local MCP server can start as a few tool functions, but production use adds a
14
+ surprising amount of non-domain work: stdout and stderr must remain clean for
15
+ JSON-RPC, credentials need safe lookup boundaries, configuration must compose
16
+ across servers, model connections need deployment-independent routing, and
17
+ long-running operations need lifecycle and recovery support. Model-controlled
18
+ local commands also need an actual security boundary.
19
+
20
+ `localmcplib` owns these reusable mechanics while consuming servers continue
21
+ to own their schemas, tools, service clients, prompts, and authorization
22
+ policy.
23
+
24
+ ## Quickstart
25
+
26
+ Install the integrated server capability:
27
+
28
+ ```console
29
+ uv add 'localmcplib[server]'
30
+ ```
31
+
32
+ The following complete `hello.py` registers one tool and runs it as a FastMCP
33
+ stdio server. `STDIOServer` loads and validates localmcplib's configuration;
34
+ applications only need a parser when they add their own configuration fields.
35
+
36
+ ```python
37
+ from fastmcp.tools import tool
38
+
39
+ import localmcp
40
+
41
+ NAME = "hello-mcp"
42
+
43
+
44
+ @tool
45
+ def hello(name: str = "world") -> str:
46
+ return f"Hello, {name}!"
47
+
48
+
49
+ # STDIOServer owns an application runtime so durable tasks and other resources
50
+ # share its startup/shutdown lifecycle. Hello has no such work, so this runtime
51
+ # intentionally does nothing.
52
+ class NoopRuntime:
53
+ def __init__(self, *_args: object, **_kwargs: object) -> None:
54
+ pass
55
+
56
+ async def start(self) -> None:
57
+ pass
58
+
59
+ async def close(self) -> None:
60
+ pass
61
+
62
+
63
+ server = localmcp.STDIOServer(
64
+ name=NAME,
65
+ tools=[hello],
66
+ runtime_factory=NoopRuntime,
67
+ )
68
+
69
+ if __name__ == "__main__":
70
+ localmcp.main(server)
71
+ ```
72
+
73
+ Create `~/.config/localmcp/localmcp.toml`:
74
+
75
+ ```toml
76
+ schema_version = 1
77
+
78
+ [llm]
79
+ backend = "openai_compatible"
80
+ base_url = "https://llm.example.test/v1"
81
+
82
+ [secrets.llm_api_key]
83
+ env_vars = ["HELLO_LLM_API_KEY"]
84
+ ```
85
+
86
+ Then run the server from an MCP client with `uv run python hello.py`. The
87
+ integrated server loads configuration and secrets, creates the model and
88
+ telemetry boundaries, owns the application runtime, registers the tool, and
89
+ serves it over stdio without writing logs to the protocol streams.
90
+
91
+ ## Features
92
+
93
+ ### Stdio MCP server composition
94
+
95
+ `localmcp.STDIOServer` assembles a FastMCP application from a server name, tool
96
+ list, and runtime factory. It owns startup and shutdown ordering, shared config
97
+ validation, secrets, model and telemetry wiring, per-server state paths,
98
+ file-only logging, and silent failure handling for stdout/stderr-safe operation.
99
+ Applications with additional configuration fields may supply an optional typed
100
+ `config_parser`; its result is passed to the runtime factory and lifespan.
101
+
102
+ ### Shared configuration and paths
103
+
104
+ One schema-versioned, XDG-aware `localmcp.toml` document provides shared
105
+ defaults. `[server.<name>]` recursively overlays those defaults for one logical
106
+ server. Applications choose the config file boundary and validate their own
107
+ effective schema; state, cache, and logs remain isolated per server.
108
+
109
+ See [docs/configuration.md](docs/configuration.md) for the document contract.
110
+
111
+ ### Secrets
112
+
113
+ Applications declare logical secret names in configuration without storing
114
+ secret values there. Resolution checks declared environment variables first,
115
+ then the operating-system keyring. Global secrets use the shared `localmcp`
116
+ keyring service; server-private secrets use `localmcp:<server-name>`. Resolved
117
+ values are redacted from string representations and errors.
118
+
119
+ ### LLM routing
120
+
121
+ Applications select logical model IDs independently of deployment routing. An
122
+ `openai_compatible` deployment can send models through a shared LiteLLM-style
123
+ endpoint, while a `native` deployment routes the same IDs to OpenAI or
124
+ Anthropic credentials. Gateway protocol dialect and native provider are
125
+ separate model properties, so switching deployment does not require changing
126
+ application model roles.
127
+
128
+ ### Sandboxing
129
+
130
+ The sandbox API provides bounded command execution with explicit filesystem
131
+ roots, a clean environment, output and time limits, process-group cleanup, and
132
+ network access disabled by default. The current implementation uses macOS
133
+ Seatbelt; the portable interface leaves room for a future Linux backend.
134
+
135
+ ### Durable workflows
136
+
137
+ The workflow package supplies LangGraph lifecycle management and a generic
138
+ SQLite operation catalog with ownership checks, recovery, worker leases,
139
+ heartbeats, cancellation, and durable tool-call budgets. Applications retain
140
+ responsibility for domain state, idempotency, and consequential side effects.
141
+
142
+ ### Observability
143
+
144
+ Structured logs are written to files only so they cannot corrupt stdio
145
+ JSON-RPC. Optional Langfuse integration adds failure-isolated tracing and
146
+ FastMCP middleware. Model and tool payload attributes are suppressed by
147
+ default. Set `LOCALMCP_LANGFUSE_CAPTURE_PAYLOADS=true` to capture model prompts,
148
+ model responses, tool arguments, and tool results. This opt-in can send secrets,
149
+ repository content, and other sensitive data to Langfuse; enable it only when
150
+ the configured Langfuse project is an approved destination for those payloads.
151
+
152
+ ## Capability extras
153
+
154
+ Install only what an application uses:
155
+
156
+ | Extra | Capability |
157
+ | --- | --- |
158
+ | `server` | Integrated FastMCP stdio application composition |
159
+ | `secrets` | OS-keyring secret resolution |
160
+ | `llm` | OpenAI-compatible and native OpenAI/Anthropic models |
161
+ | `sandbox` | Portable sandbox API and macOS Seatbelt implementation |
162
+ | `observability` | Structured file logging |
163
+ | `telemetry` | Langfuse and FastMCP telemetry integration |
164
+ | `workflows` | Durable LangGraph and SQLite workflow foundations |
165
+ | `all` | Every optional capability |
166
+
167
+ For example:
168
+
169
+ ```console
170
+ uv add 'localmcplib[server,sandbox,workflows]'
171
+ ```
172
+
173
+ ## Status
174
+
175
+ The API is alpha and may change as additional local MCP servers adopt the
176
+ library.
177
+
178
+ ## Development
179
+
180
+ Install the complete development environment and run the repository checks:
181
+
182
+ ```console
183
+ make install
184
+ make ci
185
+ make build
186
+ ```
187
+
188
+ Run `make help` to list the individual formatting, linting, type-checking,
189
+ testing, coverage, build, and cleanup targets.