Convert to MCP ImageContent.

Convert to MCP PromptMessage.

Convert the resource to an SDKResource.

Validate JWT assertion for private_key_jwt auth. Args: assertion: JWT assertion string from client client: OAuth prox

Validate that a server name is safe for use as a subprocess argument. Raises SystemExit if the name contains shell metacharacters.

The accepted form content for one answered elicitation.

The accepted value for the question `_ask` poses.

Populate the ambient request context a worker's tool body reads. A Docket worker has no live request or SDK auth context — especially a Redis

The single-question ask every guard in this module returns.

Bind this provider to a specific MCP server URL. Called automatically when ``mcp_url`` is provided to ``__init__``, or by the transpo

Session kwargs contributed by `extensions=` / `result_claims=`. Folds the user's `ClientExtension` instances into the capability ad, result

Construct the upstream IdP authorization URL using stored transaction data.

Widen this middleware's shortfall to cover the rest of the chain. Scope requirements are commonly split across several `AuthMiddleware`

Run both gates every `tasks/*` method shares.

An SDK MCPServer whose `claimed_tool` returns a claimed extension result.

Two entries so the transport takes its multi-server composite path.

Create an OAuth2 client for communicating with the upstream IdP. This is the single point for constructing the client used in token e

Scan root directories and create SkillProvider per valid skill folder.

Resolve a SEP-2322 `InputRequiredResult` to its terminal result. A 2026-era server may answer `tools/call` / `prompts/get` / `resources/read`

A single-field form elicitation request keyed by ``key``.

Coerce a callable into a Tool, respecting @tool decorator metadata.

Combine tool name, description, and parameter info into searchable text.

Pretty-print a tool call result to the console.

Format a message for logging.

Retrieves all methods marked for a specific registration type.

Get parent trace context from request meta for distributed tracing.

Return the key used to partition file storage. Defaults to ``ctx.session_id``, which is stable for stdio, SSE, and stateful HTTP. The

Get a specific tool by name. Default implementation filters _list_tools() and picks the highest version that matches the spec.

Ensure the name is unique by appending numbers if needed.

Convert MCP ImageContent to Anthropic ImageBlockParam.

Convert MCP ImageContent to OpenAI image_url content part.

Load stored tokens and client info, properly setting token expiry.

Whether this request is answering a previous round's ask (SEP-2322). A continuation must bypass the cache entirely. Cache keys are built from the

True if *tool* was marked as needing a Prefab renderer at registration.

Lift the raw ``_meta`` block from the request params. ``ctx.params`` is the raw params mapping (or None); its ``_meta`` key holds the full me

Resolve a task's current-leg execution and metadata within the scope. Returns ``(execution, base_task_key, leg_number, created_at, poll_inter

Make a cache key for a tool call using a stable hash of name and arguments.

Make a cache key for a prompt get using a stable hash of name and arguments.

Build a HeadlessOAuth with a fake stored 302 response.

Make a cache key for a resource read using a stable hash of URI.

Create session-prefixed key for state storage.

Build a mock session with a stable per-connection Connection. SDK v2 constructs a ServerSession per request; PingMiddleware keys the

A FastMCPProxy whose backend client negotiates the modern era, so the backend can emit an `InputRequiredResult` (SEP-2322) for the proxy to ro

Compare schemas by their full structure, modulo generated titles. "required" is sorted because the SDK and FastMCP may build it in a different

Normalize a Google scope shorthand to its canonical full URI. Google accepts shorthand scopes like "email" and "profile" in authorization req

Handle MCP 'resources/read' requests.

Parse an ``mcpServers``-style dict into discovered servers.

Send periodic pings until the connection ends.

Send a bare JSON-RPC request through the dispatcher, bypassing the typed `send_request` that normally stamps the outgoing envelope. The moder

Read the consent binding map from the signed cookie. Returns a dict of {txn_id: consent_token} for all pending flows.

Render tools at the requested detail level. The same detail value produces the same output format regardless of which discovery tool calls th

Re-resolve a mounted task's owning child server from the root (remote worker). A separate worker process cannot reach the submitting process's se

Builds and executes the middleware chain for a single dispatch phase. ``phase`` selects whether a pass runs only the method-agnostic hooks

A one-message sampling request.

Scan the Claude Desktop config file.

Check for ``mcp.json`` in *start_dir*.

Send `tasks/get` and parse the detailed task response.

Sign a cookie payload with HMAC-SHA256. Returns: base64(payload).base64(signature)

The user-state sub-dict of a raw stored dict (empty when absent).

Whether the running server enforces strict argument validation. Reads ``strict_input_validation`` off the active request's ``FastMCP`` instan

Remove `InputRequiredResult` arms from a union return annotation. A guard tool typically annotates its return as ``X | InputRequiredResult``;

Validate a component's public base fields without serializing its subclass.

Build a real Tool component (a FastMCPComponent) with a version.

Trace context for a task management request, for the current client span. Task management calls (`tasks/get`/`update`/`cancel`) use ordinary

Apply namespace to a URI: protocol://path → protocol://namespace/path.

Translate IdP-returned scopes into the client-facing form. Some IdPs (notably Azure) require scopes on the wire in a form that differ

Return True when id_token verification is enabled. This ensures ``load_access_token`` always patches the validated result with upstre