multi-tenant-mcp · packages

Tenant-isolated artifact and file storage with automatic namespace prefixing, path traversal protection, and configurable per-tenant quotas. Provides `FileSystemArtifactStore` and `S3ArtifactStore` classes implementing a common `ArtifactStore` interface (`put`, `get`, `list`, `delete`, `exists`), plus an `ArtifactLifecycleManager` for TTL-based cleanup; the S3 backend requires `@aws-sdk/client-s3` as a peer dependency.

A Zod-validated per-tenant configuration manager with base-config inheritance, pluggable storage, and versioned migration support. Exports `TenantConfigManager`, `ZodConfigValidator`, `InMemoryConfigStore`, and `ConfigMigrationRunner` classes, plus `TenantConfigStore` and `ConfigValidator` interfaces for custom backends.

Provides interfaces and classes for per-tenant cost tracking in MCP servers, supporting per-call, per-token, and tiered discount pricing models with non-blocking usage event emission.

A function that wraps MCP server request handlers with a configurable pipeline for tenant resolution, rate limiting, tool/resource/prompt visibility filtering, cost accounting, logging, and metrics.

Provides structured console logging and LRU-bounded per-tenant metrics for multi-tenant MCP servers, exporting `ConsoleTenantLogger` and `MetricsCollector` classes that automatically attach the current tenant ID from a `TenantContextStore`.

A per-tenant rate limiter for MCP servers that enforces fixed-window request and token quotas, exposing a `DefaultRateLimiter` class backed by either an in-memory `MemoryRateLimitStore` (single-process) or a `RedisRateLimitStore` (distributed).

Resolve tenant identity from incoming MCP requests via headers, JWTs, or API keys, and propagate it through `AsyncLocalStorage`. Exports resolver classes (`HeaderTenantResolver`, `JWTTenantResolver`, `APIKeyTenantResolver`) and a `TenantContextStore` for context propagation; JWT support requires the optional `jsonwebtoken` peer.

A class (`VisibilityEngineImpl`) and interface (`VisibilityEngine`) that control which MCP tools, resources, and prompts each tenant can see, supporting allow-list, deny-list, and runtime-evaluator policies.

Shared TypeScript types, error classes, and data structures for the multi-tenant MCP ecosystem, including `TenantContext`, `MiddlewareError`, `MiddlewareErrorCode`, and `BoundedMap`.