You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
RustyRed ships a first-class Model Context Protocol server so agents can read and (optionally)
write the graph through standard MCP tooling. It is implemented in crates/rustyred-mcp and surfaced
by rustyred-server at:
POST /mcp — JSON-RPC 2.0 endpoint.
GET /.well-known/mcp/rustyred.json — MCP server manifest.
GET /.well-known/agent.json — agent-port manifest.
All three return 404 when RUSTY_RED_MCP_ENABLED=false.
Transport & gating
/mcp is a JSON-RPC 2.0 POST endpoint. Before dispatch the server:
Checks the request Origin against RUSTY_RED_ALLOWED_ORIGINS (else 403).
Requires a bearer token with at least graph:read when auth is enabled (else 401/403).
Read-only by default. With RUSTY_RED_MCP_READ_ONLY=true (default), only read tools are listed
and callable; write tools (*.designate, *.bulk.*, vector.designate) return mcp_read_only.
Set it false to expose write tools — the caller's token still needs graph:write. The admin tool
(rustyred.admin.verify) is additionally gated by RUSTY_RED_MCP_ALLOW_ADMIN=trueand an
admin:read scope.
JSON-RPC methods
Method
Result
initialize
Server info, protocol version, and capabilities (readOnly, allowAdmin).
ping
{}
tools/list
Tool definitions (filtered by read-only/admin mode).