Class McpProtectionKey

java.lang.Object

com.soklet.McpProtectionKey

@ThreadSafe
public final class McpProtectionKey
extends Object

Immutable, purpose-specific MCP request-state protection master key.

Supplied bytes are defensively copied and are never exposed through the public API, diagnostic rendering, logs, metrics, fingerprints, or exception messages. Applications remain responsible for generating key material with a cryptographically secure random source and at least 256 bits of entropy.

Instances intentionally retain reference identity so secret key material never participates in public equality or hash-code operations. Use McpProtectionKeyringSnapshot.getFingerprint() when comparing complete non-secret keyring configurations across instances.

Author:

Mark Allen

Method Summary

Modifier and Type	Method	Description
static @NonNull McpProtectionKey	fromIdAndBytes(@NonNull String keyId, byte @NonNull [] keyMaterial)	Creates a protection master key from exact bytes.
@NonNull String	getKeyId()
@NonNull String	toString()

Methods inherited from class Object

equals, getClass, hashCode, notify, notifyAll, wait, wait, wait

Method Details

fromIdAndBytes

public static @NonNull McpProtectionKey fromIdAndBytes(@NonNull String keyId,
 byte @NonNull [] keyMaterial)

Creates a protection master key from exact bytes.

Parameters:

keyId - 1-64-byte ASCII HTTP token

keyMaterial - at least 32 bytes of operator-generated key material

Returns:

immutable key value

Throws:

IllegalArgumentException - if the ID or material is invalid

getKeyId

public @NonNull String getKeyId()

Returns:

non-secret key ID

toString

public @NonNull String toString()

Overrides:

toString in class Object

Returns:

redacted rendering containing only the non-secret key ID