mcp_key_set.h File Reference

Per-identity set of authorized MCP tool keys. More...

#include <entropic/types/config.h>
#include <mutex>
#include <string>
#include <unordered_map>
#include <vector>

Include dependency graph for mcp_key_set.h:

This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Classes
class	entropic::MCPKeySet
	Per-identity set of authorized MCP tool keys. More...

Namespaces
namespace	entropic
	Activate model on GPU (WARM → ACTIVE).

Detailed Description

Per-identity set of authorized MCP tool keys.

Default state is EMPTY — no tools authorized. Keys must be explicitly granted. This enforces the default-deny principle at the identity level.

Tool patterns support:

• Exact match: "filesystem.read_file"
• Server wildcard: "filesystem.*"
• Full wildcard: "*" (all tools — use sparingly)

Grant resolution: most specific pattern wins. "filesystem.read_file:WRITE" overrides "filesystem.*:READ" for that specific tool.

Thread safety

grant/revoke acquire key_mutex_. has_access() acquires key_mutex_ for consistency. Serialization acquires key_mutex_.

Version

1.9.4

Definition in file mcp_key_set.h.