Struct AuthContext 

pub struct AuthContext { /* private fields */ }

Per-request authorization context.

Built by middleware (e.g. from JWT claims) and stored in rmcp’s RequestContext::extensions. Use rmcp’s Extension<AuthContext> extractor to access it in tool handlers.

use mcp_authorization::{AuthContext, Capability, Proof};

struct BackwardRouting;
impl Capability for BackwardRouting {
    const NAME: &'static str = "backward_routing";
}

let auth = AuthContext::new(vec!["backward_routing"]);
let proof: Proof<BackwardRouting> = auth.require::<BackwardRouting>().unwrap();

Implementations

impl AuthContext

pub fn new(caps: impl IntoIterator<Item = impl Into<String>>) -> Self

Create a new AuthContext from an iterable of capability names.

pub fn empty() -> Self

An AuthContext with no capabilities — the deny-by-default identity.

A request resolved to an empty context sees only ungated tools, never any tool guarded by authorize or any #[requires(...)] field/variant.

pub fn check<C: Capability>(&self) -> Option<Proof<C>>

Try to obtain a Proof<C>. Returns Some(Proof) if the user has the capability, None otherwise.

This is the only way to construct a Proof<C>.

pub fn require<C: Capability>(&self) -> Result<Proof<C>, ErrorData>

Like check, but returns an McpError on failure.

pub fn has(&self, name: &str) -> bool

String-based capability query for runtime schema shaping.

pub fn capability_names(&self) -> &HashSet<String>

Returns the set of capability names this context holds.

Trait Implementations

impl Clone for AuthContext

fn clone(&self) -> AuthContext

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.