Connecting Clients

table "mcp_token" {
  auth = false
  schema {
    int id
    text token { description = "The token value embedded in the MCP connection URL" }
    int user_id { description = "Maps this token to a user in your own user table" }
    text label? { description = "Human-readable note, e.g. who this token belongs to" }
    bool active?=true
    timestamp created_at?=now
  }
  index = [
    {type: "primary", field: [{name: "id"}]}
    {type: "btree|unique", field: [{name: "token"}]}
  ]
}

mcp_server_trigger "validate_url_token" {
  mcp_server = "demo"
  actions = {connection: true}
  active = true
  description = "Reject MCP connections whose URL token isn't in the mcp_token table"

  input {
    object toolset {
      schema {
        int id
        text name
        text instructions
        text token
      }
    }
    object[] tools {
      schema {
        int id
        text name
        text instructions
      }
    }
  }

  stack {
    var $token { value = $input.toolset.token }

    db.get "mcp_token" {
      field_name = "token"
      field_value = $token
    } as $match

    precondition ($match != null && $match.active == true) {
      error_type = "accessdenied"
      error = "Invalid or missing MCP token"
    }
  }

  response = { toolset: $input.toolset, tools: $input.tools }
  history = false
}