Class: KairosMcp::Tools::TokenManage

Inherits:
BaseTool
  • Object
show all
Defined in:
lib/kairos_mcp/tools/token_manage.rb

Overview

TokenManage: MCP tool for managing Bearer tokens

Commands:

create  - Create a new token for a user
revoke  - Revoke a user's active tokens
list    - List all tokens (without showing token values)
rotate  - Revoke old token and create new one for a user

Phase 1: All authenticated users can manage tokens. Phase 2: Only ‘owner’ role can manage tokens (enforced by Safety).

Instance Method Summary collapse

Methods inherited from BaseTool

#initialize, #invoke_tool, #to_full_schema, #to_schema

Constructor Details

This class inherits a constructor from KairosMcp::Tools::BaseTool

Instance Method Details

#call(arguments) ⇒ Object 



92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
 
# File 'lib/kairos_mcp/tools/token_manage.rb', line 92

def call(arguments)
  command = arguments['command']
  user = arguments['user']
  role = arguments['role'] || 'member'
  expires_in = arguments['expires_in']

  # Get current user context from safety (set by Protocol in HTTP mode)
  current_user = @safety&.current_user

  case command
  when 'create'
    handle_create(user, role, expires_in, current_user)
  when 'revoke'
    handle_revoke(user, current_user)
  when 'list'
    handle_list
  when 'rotate'
    handle_rotate(user, current_user)
  else
    text_content("Unknown command: #{command}")
  end
rescue ArgumentError => e
  text_content("Error: #{e.message}")
rescue StandardError => e
  text_content("Error: #{e.message}")
end

#category ⇒ Object 



28
29
30
 
# File 'lib/kairos_mcp/tools/token_manage.rb', line 28

def category
  :utility
end

#description ⇒ Object 



24
25
26
 
# File 'lib/kairos_mcp/tools/token_manage.rb', line 24

def description
  'Manage Bearer tokens for HTTP authentication. Create, revoke, list, or rotate tokens for team members.'
end

#examples ⇒ Object 



36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
 
# File 'lib/kairos_mcp/tools/token_manage.rb', line 36

def examples
  [
    {
      title: 'Create a member token',
      code: 'token_manage(command: "create", user: "alice", role: "member")'
    },
    {
      title: 'Create a short-lived token',
      code: 'token_manage(command: "create", user: "ci_bot", role: "guest", expires_in: "24h")'
    },
    {
      title: 'List active tokens',
      code: 'token_manage(command: "list")'
    },
    {
      title: 'Rotate a token',
      code: 'token_manage(command: "rotate", user: "alice")'
    },
    {
      title: 'Revoke a token',
      code: 'token_manage(command: "revoke", user: "alice")'
    }
  ]
end

#input_schema ⇒ Object 



65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
 
# File 'lib/kairos_mcp/tools/token_manage.rb', line 65

def input_schema
  {
    type: 'object',
    properties: {
      command: {
        type: 'string',
        description: 'Command: "create", "revoke", "list", or "rotate"',
        enum: %w[create revoke list rotate]
      },
      user: {
        type: 'string',
        description: 'Target username (required for create, revoke, rotate)'
      },
      role: {
        type: 'string',
        description: 'Role for new token: "owner", "member", or "guest" (default: "member")',
        enum: %w[owner member guest]
      },
      expires_in: {
        type: 'string',
        description: 'Token expiry: "90d" (default), "24h", "7d", "never"'
      }
    },
    required: ['command']
  }
end

#name ⇒ Object 



20
21
22
 
# File 'lib/kairos_mcp/tools/token_manage.rb', line 20

def name
  'token_manage'
end

#related_tools ⇒ Object 



61
62
63
 
# File 'lib/kairos_mcp/tools/token_manage.rb', line 61

def related_tools
  %w[chain_history chain_status]
end

#usecase_tags ⇒ Object 



32
33
34
 
# File 'lib/kairos_mcp/tools/token_manage.rb', line 32

def usecase_tags
  %w[auth token security HTTP team management]
end