Mcp API

Generated from the typed public surface.

tesserix_adk.mcp.AgentGatewayConfig

Stability: alpha

The one AgentGateway origin and the MCP routes an ADK process may reach.

class AgentGatewayConfig(AdkModel) {endpoint(self, server: 'str') -> 'str'; route_for(self, server: 'str') -> 'AgentGatewayRoute'}

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.AgentGatewayRoute

Stability: alpha

One registry-rendered AgentGateway MCP route and its local authority policy.

class AgentGatewayRoute(AdkModel)

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.AgentGatewayRouter

Stability: alpha

Discover an agent's fixed MCP surface through the single AgentGateway egress.

class AgentGatewayRouter(object) {tools_for(self, *, identity: 'AgentIdentity', run_id: 'str', agent_version: 'str' = '1.0.0') -> 'AgentGatewayTools'}

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.AgentGatewayToolConfig

Stability: alpha

Operator-owned policy for one remote MCP tool.

class AgentGatewayToolConfig(AdkModel)

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.AgentGatewayTools

Stability: alpha

The immutable AgentGateway tool set pinned for one run and one identity.

class AgentGatewayTools(object) {invoke(self, name: 'str', arguments: 'Mapping[str, JsonValue]') -> 'GatewayToolResult'}

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.AgentGatewayTransport

Stability: alpha · Kind: Protocol

The vendor-neutral operations the router needs from an MCP transport.

class AgentGatewayTransport(Protocol) {call_tool(self, *, endpoint: 'str', tool: 'str', arguments: 'Mapping[str, JsonValue]', headers: 'Mapping[str, str]', meta: 'Mapping[str, str]', timeout_seconds: 'float', max_result_bytes: 'int') -> 'GatewayToolResult'; list_tools(self, *, endpoint: 'str', headers: 'Mapping[str, str]', meta: 'Mapping[str, str]', timeout_seconds: 'float', max_result_bytes: 'int', max_tools: 'int') -> 'tuple[McpToolDescriptor, ...]'}

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.AuthorisedCall

Stability: alpha

One call's authority: a credential for the headers, metadata for everything else.

class AuthorisedCall(object) {headers(self) -> 'dict[str, str]'; meta(self) -> 'dict[str, str]'; span_attributes(self) -> 'dict[str, str]'}

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.CallCredential

Stability: alpha · Kind: Protocol

The part of a minted credential a caller renders.

class CallCredential(Protocol) {headers(self) -> 'dict[str, str]'}

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.CredentialSource

Stability: alpha · Kind: Protocol

Whatever mints per-call credentials — tesserix_adk.tools.CredentialBroker does.

class CredentialSource(Protocol) {for_tool(self, *, identity: 'AgentIdentity', audience: 'str', needs: 'Iterable[str]', run_id: 'str', agent_version: 'str' = Ellipsis) -> 'CallCredential'}

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.GatewayTool

Stability: alpha

A remote tool after operator policy and stable namespacing are applied.

class GatewayTool(AdkModel)

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.GatewayToolResult

Stability: alpha

A bounded MCP result with vendor types removed at the transport boundary.

class GatewayToolResult(AdkModel)

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.META_PREFIX

Stability: alpha

str(object='') -> str str(bytes_or_buffer[, encoding[, errors]]) -> str

META_PREFIX: str

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.McpAuthorizer

Stability: alpha

Mints the authority for one MCP call, narrowed to one configured server.

class McpAuthorizer(object) {authorise(self, *, server: 'str', identity: 'AgentIdentity', needs: 'Iterable[str]', run_id: 'str', agent_version: 'str' = '1.0.0', strict: 'bool' = False) -> 'AuthorisedCall'; declared(self, server: 'str') -> 'McpServerAuth'; narrowed_for(self, *, server: 'str', identity: 'AgentIdentity', requested: 'Iterable[str]') -> 'frozenset[str]'}

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.McpGatewayError

Stability: alpha

An AgentGateway failure that never repeats credentials or remote content.

class McpGatewayError(AdkError)

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.McpGatewayReason

Stability: alpha

Stable reasons an AgentGateway operation failed.

class McpGatewayReason(StrEnum)

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.McpServerAuth

Stability: alpha

What one configured MCP server is allowed to be handed.

class McpServerAuth(AdkModel)

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.McpToolDescriptor

Stability: alpha

One tool returned by MCP discovery, before local policy is applied.

class McpToolDescriptor(AdkModel)

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.ServerSessions

Stability: alpha

Leases pooled MCP sessions, one per server, tenant and caller.

class ServerSessions(object) {lease(self, *, server: 'str', identity: 'AgentIdentity') -> 'SessionLease'}

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.SessionLease

Stability: alpha

A pooled session bound to the caller it was opened for.

class SessionLease(object) {check(self, identity: 'AgentIdentity') -> 'None'}

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.auth.AuthorisedCall

Stability: alpha

One call's authority: a credential for the headers, metadata for everything else.

class AuthorisedCall(object) {headers(self) -> 'dict[str, str]'; meta(self) -> 'dict[str, str]'; span_attributes(self) -> 'dict[str, str]'}

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.auth.CallCredential

Stability: alpha · Kind: Protocol

The part of a minted credential a caller renders.

class CallCredential(Protocol) {headers(self) -> 'dict[str, str]'}

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.auth.CredentialSource

Stability: alpha · Kind: Protocol

Whatever mints per-call credentials — tesserix_adk.tools.CredentialBroker does.

class CredentialSource(Protocol) {for_tool(self, *, identity: 'AgentIdentity', audience: 'str', needs: 'Iterable[str]', run_id: 'str', agent_version: 'str' = Ellipsis) -> 'CallCredential'}

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.auth.META_PREFIX

Stability: alpha

str(object='') -> str str(bytes_or_buffer[, encoding[, errors]]) -> str

META_PREFIX: str

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.auth.McpAuthorizer

Stability: alpha

Mints the authority for one MCP call, narrowed to one configured server.

class McpAuthorizer(object) {authorise(self, *, server: 'str', identity: 'AgentIdentity', needs: 'Iterable[str]', run_id: 'str', agent_version: 'str' = '1.0.0', strict: 'bool' = False) -> 'AuthorisedCall'; declared(self, server: 'str') -> 'McpServerAuth'; narrowed_for(self, *, server: 'str', identity: 'AgentIdentity', requested: 'Iterable[str]') -> 'frozenset[str]'}

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.auth.McpServerAuth

Stability: alpha

What one configured MCP server is allowed to be handed.

class McpServerAuth(AdkModel)

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.auth.ServerSessions

Stability: alpha

Leases pooled MCP sessions, one per server, tenant and caller.

class ServerSessions(object) {lease(self, *, server: 'str', identity: 'AgentIdentity') -> 'SessionLease'}

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.auth.SessionLease

Stability: alpha

A pooled session bound to the caller it was opened for.

class SessionLease(object) {check(self, identity: 'AgentIdentity') -> 'None'}

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.gateway.AgentGatewayConfig

Stability: alpha

The one AgentGateway origin and the MCP routes an ADK process may reach.

class AgentGatewayConfig(AdkModel) {endpoint(self, server: 'str') -> 'str'; route_for(self, server: 'str') -> 'AgentGatewayRoute'}

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.gateway.AgentGatewayRoute

Stability: alpha

One registry-rendered AgentGateway MCP route and its local authority policy.

class AgentGatewayRoute(AdkModel)

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.gateway.AgentGatewayRouter

Stability: alpha

Discover an agent's fixed MCP surface through the single AgentGateway egress.

class AgentGatewayRouter(object) {tools_for(self, *, identity: 'AgentIdentity', run_id: 'str', agent_version: 'str' = '1.0.0') -> 'AgentGatewayTools'}

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.gateway.AgentGatewayToolConfig

Stability: alpha

Operator-owned policy for one remote MCP tool.

class AgentGatewayToolConfig(AdkModel)

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.gateway.AgentGatewayTools

Stability: alpha

The immutable AgentGateway tool set pinned for one run and one identity.

class AgentGatewayTools(object) {invoke(self, name: 'str', arguments: 'Mapping[str, JsonValue]') -> 'GatewayToolResult'}

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.gateway.AgentGatewayTransport

Stability: alpha · Kind: Protocol

The vendor-neutral operations the router needs from an MCP transport.

class AgentGatewayTransport(Protocol) {call_tool(self, *, endpoint: 'str', tool: 'str', arguments: 'Mapping[str, JsonValue]', headers: 'Mapping[str, str]', meta: 'Mapping[str, str]', timeout_seconds: 'float', max_result_bytes: 'int') -> 'GatewayToolResult'; list_tools(self, *, endpoint: 'str', headers: 'Mapping[str, str]', meta: 'Mapping[str, str]', timeout_seconds: 'float', max_result_bytes: 'int', max_tools: 'int') -> 'tuple[McpToolDescriptor, ...]'}

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.gateway.GatewayTool

Stability: alpha

A remote tool after operator policy and stable namespacing are applied.

class GatewayTool(AdkModel)

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.gateway.GatewayToolResult

Stability: alpha

A bounded MCP result with vendor types removed at the transport boundary.

class GatewayToolResult(AdkModel)

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.gateway.McpGatewayError

Stability: alpha

An AgentGateway failure that never repeats credentials or remote content.

class McpGatewayError(AdkError)

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.gateway.McpGatewayReason

Stability: alpha

Stable reasons an AgentGateway operation failed.

class McpGatewayReason(StrEnum)

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].

tesserix_adk.mcp.gateway.McpToolDescriptor

Stability: alpha

One tool returned by MCP discovery, before local policy is applied.

class McpToolDescriptor(AdkModel)

Typed errors: None declared.

Runnable recipe: examples/mcp_auth_context.py — MCP identity is verified rather than accepted from payload metadata. Install tesserix-adk[mcp].