Hosted MCP (two trust surfaces: public read-only · bearer admin)

Generated from mcp/patterns.registry.json — do not edit by hand; change the registry and run bun run patterns:build.

Index card — the docs below are the canonical explanation; deep-tier pattern pages additionally carry invariants and emulation notes.

Category: Architecture & Request Pipeline · Tier: light · Risk: low — structural pattern, no external services

Serves the pattern registry and a separate demo-state service over HTTP through distinct trust boundaries — an unauthenticated public endpoint and bearer-token-protected private/admin endpoints.

When to use: Reach for it when exposing an MCP tool registry over HTTP with differing authentication and telemetry requirements per surface.

Docs

• docs/blueprint/architecture/hosted-mcp.md (GitHub · GitLab)

Code

• src/lib/server/mcp/ (GitHub · GitLab)
• src/routes/api/mcp/ (GitHub · GitLab)

Proof

• POST /api/mcp/public (app route, no showcase)
• /admin/mcp (app route, no showcase)

Machine-readable record: architecture-hosted-mcp in mcp/patterns.registry.json.