Add upstream MCP proxy backend for guarded passthrough tools #24

Merged
coilyco-ops merged 1 commit from issue-18 into main 2026-07-15 03:55:13 +00:00
Member

This adds a guarded upstream MCP proxy backend for streamable-HTTP servers. The proxy snapshots an allowlisted upstream tool surface, preserves the upstream tool schema where possible, and fails closed on unknown tools or schema drift.

  • Added serve-upstream for the proxy backend
  • Added tests for allowlisted projection, call forwarding, and schema-drift rejection
  • Verified with go build ./..., go vet ./..., and go test ./...

closes #18
ward.workflow: pull-request-and-merge

This adds a guarded upstream MCP proxy backend for streamable-HTTP servers. The proxy snapshots an allowlisted upstream tool surface, preserves the upstream tool schema where possible, and fails closed on unknown tools or schema drift. - Added `serve-upstream` for the proxy backend - Added tests for allowlisted projection, call forwarding, and schema-drift rejection - Verified with `go build ./...`, `go vet ./...`, and `go test ./...` closes #18 ward.workflow: pull-request-and-merge
add upstream mcp proxy backend
All checks were successful
ci / gate (push) Successful in 27s
ci / publish (push) Has been skipped
ci / gate (pull_request) Successful in 29s
ci / publish (pull_request) Has been skipped
2dd95e9de2
Sign in to join this conversation.
No description provided.