Hosted MCP (two trust surfaces: public read-only · bearer admin)
Generated from
mcp/patterns.registry.json— do not edit by hand; change the registry and runbun run patterns:build.
Index card — the docs below are the canonical explanation; deep-tier pattern pages additionally carry invariants and emulation notes.
Category: Architecture & Request Pipeline · Tier: light · Risk: low — structural pattern, no external services
Serves the pattern registry and a separate demo-state service over HTTP through distinct trust boundaries — an unauthenticated public endpoint and bearer-token-protected private/admin endpoints.
When to use: Reach for it when exposing an MCP tool registry over HTTP with differing authentication and telemetry requirements per surface.
Docs
Code
Proof
POST /api/mcp/public(app route, no showcase)/admin/mcp(app route, no showcase)
Machine-readable record: architecture-hosted-mcp in mcp/patterns.registry.json.