omnigraph/crates/omnigraph-server
Ragnor Comerford 9df9f394c0
feat(server): in-server MCP endpoint over Streamable HTTP (rmcp), RFC-003
Adds POST /mcp: a stateless, JSON-only MCP (Model Context Protocol) endpoint
served by rmcp 1.7's StreamableHttpService, mounted inside per_graph_protected
so it inherits the bearer-auth and graph-handle middleware (single mode serves
/mcp; multi mode nests it to /graphs/{graph_id}/mcp).

rmcp's stateless mode (stateful_mode=false, json_response=true) provides
GET/DELETE 405, loopback Host validation, and MCP-Protocol-Version checking
(400 on unsupported, default 2025-03-26) without extra code. The handler
advertises the tools capability and answers the initialize handshake; the
tool catalog, resources, and stored-query projection land in the following
phases. Auth stays decoupled (RFC-003 5.8): the handler consumes the
already-resolved ResolvedActor and branches on nothing about how the token
was verified.

Tests (tests/server.rs): initialize handshake, GET 405, and bearer required
(401 without a token, 200 with). The docs/user/server.md MCP section is
deferred to the docs phase per the RFC-003 rollout, since the endpoint
exposes an empty tool list until the tools phase.

Co-Authored-By: Claude <noreply@anthropic.com>
2026-06-08 15:27:01 +02:00
..
examples feat: inline query strings in CLI and HTTP server (#110) 2026-05-29 13:41:54 +02:00
src feat(server): in-server MCP endpoint over Streamable HTTP (rmcp), RFC-003 2026-06-08 15:27:01 +02:00
tests feat(server): in-server MCP endpoint over Streamable HTTP (rmcp), RFC-003 2026-06-08 15:27:01 +02:00
Cargo.toml feat(server): in-server MCP endpoint over Streamable HTTP (rmcp), RFC-003 2026-06-08 15:27:01 +02:00