Add upstream MCP proxy backend for guarded passthrough tools #24

Merged
coilyco-ops merged 1 commit from issue-18 into main 2026-07-15 03:55:13 +00:00
Member

This adds a guarded upstream MCP proxy backend for streamable-HTTP servers. The proxy snapshots an allowlisted upstream tool surface, preserves the upstream tool schema where possible, and fails closed on unknown tools or schema drift.

  • Added serve-upstream for the proxy backend
  • Added tests for allowlisted projection, call forwarding, and schema-drift rejection
  • Verified with go build ./..., go vet ./..., and go test ./...

closes #18
ward.workflow: pull-request-and-merge

This adds a guarded upstream MCP proxy backend for streamable-HTTP servers. The proxy snapshots an allowlisted upstream tool surface, preserves the upstream tool schema where possible, and fails closed on unknown tools or schema drift. - Added `serve-upstream` for the proxy backend - Added tests for allowlisted projection, call forwarding, and schema-drift rejection - Verified with `go build ./...`, `go vet ./...`, and `go test ./...` closes #18 ward.workflow: pull-request-and-merge
add upstream mcp proxy backend
All checks were successful
ci / gate (push) Successful in 27s
ci / publish (push) Has been skipped
ci / gate (pull_request) Successful in 29s
ci / publish (pull_request) Has been skipped
2dd95e9de2
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
coilyco-flight-deck/mcp-beaver!24
No description provided.