Class McpAppResourceMetadata

java.lang.Object

com.soklet.McpAppResourceMetadata

@ThreadSafe
public final class McpAppResourceMetadata
extends Object

Immutable security policy and presentation hints for an MCP Apps resource.

Permissions request capabilities rather than grant them. Hosts enforce content security policy and may further restrict it; this value does not construct a browser sandbox or establish host acceptance of a domain hint.

Author:

Mark Allen

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static final class	McpAppResourceMetadata.Builder	Mutable builder for immutable Apps resource metadata.
static final class	McpAppResourceMetadata.ContentSecurityPolicy	Immutable allowlists of canonical ASCII origins, not raw CSP header sources.
static enum	McpAppResourceMetadata.Permission	Browser capabilities that an Apps resource may request from its host.

Method Summary

Modifier and Type	Method	Description
static @NonNull McpAppResourceMetadata.Builder	builder()
boolean	equals(@Nullable Object other)
@NonNull Optional<@NonNull McpAppResourceMetadata.ContentSecurityPolicy>	getContentSecurityPolicy()	Returns the explicitly supplied content security policy.
@NonNull Optional<@NonNull String>	getDomain()
@NonNull Set<@NonNull McpAppResourceMetadata.Permission>	getPermissions()
@NonNull Optional<@NonNull Boolean>	getPrefersBorder()	Returns the host presentation preference for a visible border and background.
int	hashCode()
@NonNull String	toString()

Methods inherited from class Object

getClass, notify, notifyAll, wait, wait, wait

Method Details

builder

public static @NonNull McpAppResourceMetadata.Builder builder()

Returns:

mutable builder with empty permissions and omitted hints

getContentSecurityPolicy

public @NonNull Optional<@NonNull McpAppResourceMetadata.ContentSecurityPolicy> getContentSecurityPolicy()

Returns the explicitly supplied content security policy.

An empty optional means CSP metadata is omitted, not that sandbox protection is disabled. MCP Apps hosts must still apply restrictive defaults.

Returns:

content security policy, or empty when omitted

getPermissions

public @NonNull Set<@NonNull McpAppResourceMetadata.Permission> getPermissions()

Returns:

immutable requested permissions in enum declaration order

getDomain

public @NonNull Optional<@NonNull String> getDomain()

Returns:

optional host-specific sandbox-origin hint

getPrefersBorder

public @NonNull Optional<@NonNull Boolean> getPrefersBorder()

Returns the host presentation preference for a visible border and background. Omission leaves the presentation to the host; explicit false requests an unframed presentation. This hint does not configure CSS inside the App.

Returns:

border preference, preserving omission separately from false

equals

public boolean equals(@Nullable Object other)

Overrides:

equals in class Object

Returns:

whether policy, permissions, and optional hints match

hashCode

public int hashCode()

Overrides:

hashCode in class Object

Returns:

structural hash code

toString

public @NonNull String toString()

Overrides:

toString in class Object

Returns:

diagnostic rendering without policy or hint values