Struct SigilMcpServer 

pub struct SigilMcpServer<S: SensitivityScanner, A: AuditLogger> { /* private fields */ }

A reference SIGIL-secured MCP server.

Wraps any set of tools with:

• Input scanning — tool arguments are scanned for secrets before execution
• Output scanning — tool results are scanned for secrets before returning
• Audit logging — every tool invocation is logged
• Trust gating — tools can require a minimum trust level
• SIGIL signing — every response carries a signed _sigil envelope

Implementations

impl<S: SensitivityScanner, A: AuditLogger> SigilMcpServer<S, A>

pub fn new(name: &str, version: &str, scanner: Arc<S>, audit: Arc<A>) -> Self

Create a new SIGIL MCP server (no signing keypair — dev mode).

pub fn new_with_keypair( name: &str, version: &str, scanner: Arc<S>, audit: Arc<A>, keypair: SigilKeypair, did: &str, ) -> Self

Create a server with a signing keypair (production mode).

pub fn verifying_key(&self) -> Option<String>

Returns the server’s public verifying key (base64url), if a keypair is set.

pub fn set_required_trust(&mut self, level: TrustLevel)

Set the minimum trust level for the entire server.

pub fn register_tool(&mut self, tool: ToolDef)

Register a tool.

pub fn register_tool_with_trust(&mut self, tool: ToolDef, trust: TrustLevel)

Register a tool with a specific trust requirement.

pub async fn handle_request( &self, request: &str, caller_trust: TrustLevel, ) -> String

Handle an incoming JSON-RPC 2.0 request string.

Returns the JSON-RPC response string. All tool arguments and results are scanned by the SIGIL SensitivityScanner, and every invocation is logged via the AuditLogger.