Class McpProtectionKeyring

java.lang.Object

com.soklet.McpProtectionKeyring

@ThreadSafe
public final class McpProtectionKeyring
extends Object

Immutable initial MCP request-state protection keyring.

Exactly one key is initially active for sealing. Other entries are initially verification-only. Building a server copies the complete ring, including key material, into independent server-owned live state. Runtime rotation is available only through that server's McpProtectionKeyringManager.

Author:

Mark Allen

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static final class	McpProtectionKeyring.Builder	Single-threaded builder for an immutable initial keyring.

Method Summary

Modifier and Type	Method	Description
@NonNull String	getActiveKeyId()
@NonNull Set<@NonNull String>	getVerificationKeyIds()
static @NonNull McpProtectionKeyring.Builder	withActiveKey(@NonNull McpProtectionKey activeKey)	Vends a builder primed with the initial active key.

Methods inherited from class Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

withActiveKey

public static @NonNull McpProtectionKeyring.Builder withActiveKey(@NonNull McpProtectionKey activeKey)

Vends a builder primed with the initial active key.

Parameters:

activeKey - initial active key

Returns:

keyring builder

getActiveKeyId

public @NonNull String getActiveKeyId()

Returns:

non-secret active key ID

getVerificationKeyIds

public @NonNull Set<@NonNull String> getVerificationKeyIds()

Returns:

immutable verification-only key ID set