Method getToolsForWorkspace

src/node/services/mcpServerManager.ts:907–1261

(options: {
    workspaceId: string;
    projectPath: string;
    runtime: Runtime;
    workspacePath: string;
    /** Whether repo-local MCP config is allowed for this project. */
    trusted?: boolean;
    /** Per-workspace MCP overrides (disabled servers, tool allowlists) */
    overrides?: WorkspaceMCPOverrides;
    /** Project secrets, used for resolving {secret: "KEY"} header references. */
    projectSecrets?: Record<string, string>;
  })

  }

  async getToolsForWorkspace(options: {
    workspaceId: string;
    projectPath: string;
    runtime: Runtime;
    workspacePath: string;
    /** Whether repo-local MCP config is allowed for this project. */
    trusted?: boolean;
    /** Per-workspace MCP overrides (disabled servers, tool allowlists) */
    overrides?: WorkspaceMCPOverrides;
    /** Project secrets, used for resolving {secret: "KEY"} header references. */
    projectSecrets?: Record<string, string>;
  }): Promise<MCPToolsForWorkspaceResult> {
    const {
      workspaceId,
      projectPath,
      runtime,
      workspacePath,
      trusted = false,
      overrides,
      projectSecrets,
    } = options;

    // Fetch full server info for project-level allowlists and server filtering
    const fullServerInfo = await this.getAllServers(projectPath, trusted);

    // Apply server-level overrides (enabled/disabled) before caching
    const enabledServers = this.filterServersByPolicy(
      this.applyServerOverrides(fullServerInfo, overrides)
    );
    const enabledEntries = Object.entries(enabledServers).sort(([a], [b]) => a.localeCompare(b));

    const enabledServerNames = new Set(enabledEntries.map(([name]) => name));

    // Signature is based on *start config* only (not tool allowlists), so changing allowlists
    // does not force a server restart.
    const signatureEntries: Record<string, unknown> = {};
    for (const [name, info] of enabledEntries) {
      if (info.transport === "stdio") {
        signatureEntries[name] = { transport: "stdio", command: info.command };
        continue;
      }

      // OAuth status affects whether we can attach authProvider during server start.
      // Include this (redacted) information in the signature so we retry starting
      // remote servers after a user logs in/out.
      let hasOauthTokens = false;
      if (this.mcpOauthService) {
        try {
          hasOauthTokens = await this.mcpOauthService.hasAuthTokens({
            serverUrl: info.url,
          });
        } catch (error) {
          log.debug("[MCP] Failed to resolve MCP OAuth status", { name, error });
        }
      }

      try {
        const { headers } = resolveHeaders(info.headers, projectSecrets);