Struct McpAuditLayer 

pub struct McpAuditLayer { /* private fields */ }

Audits tools/call requests for the named MCP tools (the ones that change the server) as user mcp, with the arguments redacted like an admin request body. Wrap the MCP server with it.

Implementations

impl McpAuditLayer

pub fn new(tools: impl IntoIterator<Item = impl Into<String>>) -> McpAuditLayer

Trait Implementations

impl Middleware for McpAuditLayer

fn accepts_streamed_body( &self, request: &Request, _connection: &ConnectionInfo, ) -> bool

Only POST /mcp… bodies are looked at; everything else passes straight through (streamed bodies, the async forwarder, inline runs).

fn handle( &self, request: &Request, connection: &ConnectionInfo, next: &dyn Application, ) -> Result<Response, String>

fn is_passthrough( &self, request: &Request, _connection: &ConnectionInfo, ) -> bool

true when handle would do nothing for request but call next (e.g. a rate limit that isn’t configured). A WithMiddleware stack offers the inner application’s execute_async only if every layer passes the request through. Default false.

fn runs_inline(&self, _request: &Request, _connection: &ConnectionInfo) -> bool

true when this layer’s own work for request never blocks (in-memory state, atomics, short mutexes) — see Application::runs_inline. A WithMiddleware stack runs inline only if every layer and the inner application agree. Default false.

fn answers_streamed_body( &self, _request: &Request, _connection: &ConnectionInfo, ) -> bool

true when this layer answers request itself — it doesn’t call next — and reads its body as a stream (a proxy forwarding it as it arrives). The body is then streamed whatever the layers after it and the application would say. Requires accepts_streamed_body. Since 18.3.0.