mcp_authorization.h File Reference

Per-identity MCP authorization with runtime grant/revoke. More...

#include <entropic/mcp/mcp_key_set.h>
#include <entropic/types/error.h>
#include <mutex>
#include <string>
#include <unordered_map>
#include <vector>

Include dependency graph for mcp_authorization.h:

This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Classes
class	entropic::MCPAuthorizationManager
	Per-identity MCP authorization with runtime grant/revoke. More...

Namespaces
namespace	entropic
	Activate model on GPU (WARM → ACTIVE).

Detailed Description

Per-identity MCP authorization with runtime grant/revoke.

Manages MCPKeySet instances per identity. Provides the enforcement check called by ToolExecutor before tool execution. Handles cross-identity key granting (identity A grants keys to identity B).

Ownership

One MCPAuthorizationManager per engine instance.

Default behavior

If an identity has no MCPKeySet registered, the authorization check PASSES (backward compatible — v1.8.5/v1.8.6 behavior). Once a key set is registered for an identity (even an empty one), authorization is enforced. This allows incremental adoption.

Thread safety

All public methods acquire auth_mutex_.

Version

1.9.4

Definition in file mcp_authorization.h.