mcp_authorization.h

Go to the documentation of this file.

// SPDX-License-Identifier: Apache-2.0
#pragma once
 
#include <entropic/mcp/mcp_key_set.h>
#include <entropic/types/error.h>
 
#include <mutex>
#include <string>
#include <unordered_map>
#include <vector>
 
namespace entropic {
 
class MCPAuthorizationManager {
public:
    void register_identity(const std::string& identity_name);
 
    bool is_enforced(const std::string& identity_name) const;
 
    entropic_error_t grant(const std::string& identity_name,
                           const std::string& pattern,
                           MCPAccessLevel level);
 
    entropic_error_t revoke(const std::string& identity_name,
                            const std::string& pattern);
 
    bool check_access(const std::string& identity_name,
                      const std::string& tool_name,
                      MCPAccessLevel required_level) const;
 
    entropic_error_t grant_from(const std::string& granter_name,
                                const std::string& grantee_name,
                                const std::string& pattern,
                                MCPAccessLevel level);
 
    std::vector<MCPKey> list_keys(
        const std::string& identity_name) const;
 
    std::string serialize_all() const;
 
    bool deserialize_all(const std::string& json);
 
    void unregister_identity(const std::string& identity_name);
 
private:
    std::unordered_map<std::string, MCPKeySet> key_sets_;
 
    mutable std::mutex auth_mutex_;
};
 
} // namespace entropic