@withpica/mcp-server
Version:
MCP Server for withPICA — enables AI assistants to interact with your withPICA music catalog
29 lines • 1.08 kB
TypeScript
/**
* Sharing MCP Tools — ADR-232 § Decision 2
*
* pica_share_trace — explainability aggregator. Returns the unioned
* chain of reasons a viewer can see an entity, ranked by directness:
*
* 1. org_membership (viewer is in the calling org)
* 2. custody_chain (viewer's org is on the work's custody chain)
* 3. share_link (an active link grants viewer access)
* 4. cross_org_grant (viewer's org has an ADR-204 grant)
*
* Two-axis access control:
* - Caller NOT owner of entity → 403 INSUFFICIENT_SCOPE (don't leak
* ownership existence). AC-3.
* - Caller IS owner but viewer can't see → has_access:false with
* reasons:[]. Don't leak why. AC-4.
*/
import { PicaClient } from "@withpica/mcp-sdk";
import type { ToolDefinition, ToolExecutor } from "./index.js";
export declare class SharingTools {
private pica;
constructor(pica: PicaClient);
getTools(): Array<{
definition: ToolDefinition;
executor: ToolExecutor;
}>;
private shareTrace;
}
//# sourceMappingURL=sharing.d.ts.map