Expand description
Optional remote MCP transport over Streamable HTTP.
The endpoint exposes shell and filesystem capabilities, so remote mode is deliberately fail-closed: loopback bind by default, strong file-backed or explicit bearer credentials, bounded request concurrency/rate, and isolated daemon namespaces for independently authenticated principals.
Structs§
Constants§
- DEFAULT_
MAX_ CONCURRENCY - DEFAULT_
PRINCIPAL_ REQUESTS_ PER_ MINUTE - Fixed-window request budget per authenticated principal. Behind one reverse proxy every client shares a single source IP, so the IP window alone cannot keep one busy principal from starving the others.
- DEFAULT_
REQUESTS_ PER_ MINUTE