Remove all entries whose TTL has elapsed.

Remove expired JTIs from cache.

Collect a full snapshot of system stats.

Establish or reuse a session connection. This method implements the reentrant context manager pattern: - First call: Creates

Serialize a single content block to a JSON-safe dict.

Convert OpenAPI nullable field to JSON Schema type array.

Convert MCP ToolChoice to Google GenAI ToolConfig.

Convert MCP tools to Anthropic tool format.

Return the key used for HMAC-signing consent cookies. Uses the upstream client secret when available, falling back to the JWT signing

Create HTTP Basic Auth header value from client credentials.

Create a client factory from the given target. Internal helper that handles the session strategy based on the target type: - Connected Client

Create dataclass from object schema.

Decode a JWT part (header or payload) without signature verification. Args: token: JWT token string (header.payload.signature) pa

Decode and verify a signed base64-encoded JSON list from cookie. Returns [] if missing/invalid.

Convert dict enum to SEP-1330 compliant schema pattern. Args: enum_dict: {"low": {"title": "Low Priority"}, "medium": {"title": "Medium P

Shared dispatch logic for @app.tool() and @app.ui() calling patterns.

Build (request, response, status) Redis keys for a task's elicitation.

Encode values to base64 and sign with HMAC. Returns: signed cookie value (payload.signature)

Execute a single tool and return its result.

Extract all schema names referenced by a schema (including transitive dependencies). Args: schema: The schema to analyze

Extract upstream claims to embed in FastMCP JWT. Override this method to decode upstream tokens, call userinfo endpoints, or otherwis

Format a host for inclusion in a URL, bracketing IPv6 addresses. A bare IPv6 address like ``::1`` must be wrapped in brackets when placed bef

Get a string representation of the arguments.

Extract the first candidate from a response.

Gets a client instance by calling the sync or async factory.

Get raw image data as base64-encoded string.

Get the auth-filtered tool catalog, excluding pinned tools.

Quick check if schema has any readOnly properties.

Check if a schema contains any $ref.

Quick check if schema has any writeOnly properties.

Inject the MCP message log panel before </body>.

Check whether a tool is handled specially as backend tool Tools registered via ``@app.tool()`` (without ``model=True``) have ``meta["ui"]["vi

Check if a schema represents a simple (non-complex) type.

List all available resource templates, in the format expected by the low-level MCP server. Supports pagination when list_page_size is

List all resources from the remote server.

Look up task execution and metadata from Redis. Consolidates the common pattern of fetching task metadata from Redis, validating it exists, a

Create the call_tool proxy that executes discovered tools.

Create a stable key for consent tracking from client_id and redirect_uri.

Create the get_prompt tool.

Create the list_prompts tool.

Create the list_resources tool.

Create the read_resource tool.

Wrap a proxy handler to restore request_ctx before delegating. The wrapper is a plain ``async def`` so it passes ``inspect.isfunction()`` che

Create the search tool. Subclasses define the parameter schema.

Check if the tool matches the cache settings for tool calls.

Mark a tool as a Prefab tool if its config or return type implies it. Per-tool renderer resources are synthesized lazily at list/read time; h

Merge two schemas, with the override schema taking precedence. Args: base_schema: Base schema to start with override_

Convert Anthropic response to CreateMessageResultWithTools.

Normalize a resource URL by removing query parameters and trailing slashes. RFC 8707 allows clients to include query parameters in resource URLs,

Convert an object schema to the appropriate Python type. Single source of truth for the four object-schema cases, used by both the top-level

Generic pagination helper for list operations. Args: request_factory: Function that creates a request from a cursor c

Send periodic pings until session ends.

Call PrefabApp.to_json() with the hash-based resolver. The resolver prefixes peer-tool references with a deterministic hash derived from the

Prepare scopes for upstream token refresh request. Override this method to transform scopes before sending to upstream provider. For

Convert a scalar to its query-string representation. Booleans are lowercased to match JSON/OpenAPI conventions (true/false) rather than Pytho

Raise ImportError with install instructions if azure-identity is not available.

Reset session state after disconnect or cancellation. Args: full: If True, also resets session_task and nesting_counter.

Resolve a callable's parameter type hints, tolerating partials. ``get_type_hints`` rejects ``functools.partial`` objects (and other non-funct

Resolve JSON Schema reference to target schema.

Set the ``request_ctx``, ``_current_context`` and ``_current_server`` ContextVars from stashed values. Called at the start of proxy handler i

Remove namespace prefix from a name, or None if no match.

Remove namespace from a URI, or None if no match.

Convert string to valid Python identifier.

Check if a URL has query parameters.

Add a consent binding entry for a transaction. This cookie binds the browser that approved consent to the IdP callback, ensuring a di

Set up a proxy JWT pointing at a valid upstream token, with optional upstream_claims.

Convert to an mcp.types.Tool for SDK compatibility. This is used internally when passing tools to the MCP SDK's create_message() meth

Lowercase, split on non-alphanumeric, filter short tokens.

Apply namespace prefix to a name.

Truncate text to fit within max_size and wrap in ToolResult.

Refresh the upstream token transparently and update storage. Called during load_access_token when the upstream token has expired but

Poll until a process has exited, raising if it's still alive after timeout.

Enumerate all prefab tools across the server's providers (sync walk of _components).

Write version info to cache.

Write the consent binding map to a signed cookie.