CyberMCP

Implementation Reference

• src/tools/authentication.ts:197-235 (handler)

  The handler function that executes the logic for the 'auth_status' tool. It retrieves the current authentication state using AuthManager and constructs a detailed status message based on the auth type, including token details, expiry, and headers.
  async () => { const authManager = AuthManager.getInstance(); const authState = authManager.getAuthState(); let statusText = ""; if (authState.type === 'none') { statusText = "No authentication configured. Use basic_auth, token_auth, oauth2_auth, or api_login to authenticate."; } else { statusText = `Current authentication type: ${authState.type}\n`; if (authState.type === 'basic') { statusText += `Username: ${authState.username}\n`; statusText += `Authentication header: Authorization: Basic ***\n`; } else if (authState.type === 'token' || authState.type === 'oauth2') { statusText += `Token: ${authState.token?.substring(0, 10)}***\n`; if (authState.refreshToken) { statusText += `Refresh token: Available\n`; } if (authState.tokenExpiry) { const now = new Date(); const isExpired = now > authState.tokenExpiry; statusText += `Token expires: ${authState.tokenExpiry.toISOString()} (${isExpired ? 'EXPIRED' : 'Valid'})\n`; } if (authState.headers) { statusText += `Authentication headers: ${Object.keys(authState.headers).join(', ')}\n`; } } } return { content: [ { type: "text", text: statusText, }, ], }; }
• src/tools/authentication.ts:194-236 (registration)

  Registration of the 'auth_status' tool in the registerAuthenticationTools function using server.tool(). Includes empty input schema (no parameters) and references the inline handler.
  server.tool( "auth_status", {}, async () => { const authManager = AuthManager.getInstance(); const authState = authManager.getAuthState(); let statusText = ""; if (authState.type === 'none') { statusText = "No authentication configured. Use basic_auth, token_auth, oauth2_auth, or api_login to authenticate."; } else { statusText = `Current authentication type: ${authState.type}\n`; if (authState.type === 'basic') { statusText += `Username: ${authState.username}\n`; statusText += `Authentication header: Authorization: Basic ***\n`; } else if (authState.type === 'token' || authState.type === 'oauth2') { statusText += `Token: ${authState.token?.substring(0, 10)}***\n`; if (authState.refreshToken) { statusText += `Refresh token: Available\n`; } if (authState.tokenExpiry) { const now = new Date(); const isExpired = now > authState.tokenExpiry; statusText += `Token expires: ${authState.tokenExpiry.toISOString()} (${isExpired ? 'EXPIRED' : 'Valid'})\n`; } if (authState.headers) { statusText += `Authentication headers: ${Object.keys(authState.headers).join(', ')}\n`; } } } return { content: [ { type: "text", text: statusText, }, ], }; } );
• src/utils/authManager.ts:74-76 (helper)

  The getAuthState() method of AuthManager class, which is called by the auth_status handler to obtain the current authentication state object.
  public getAuthState(): AuthState { return { ...this.authState }; }
• src/tools/index.ts:13-13 (registration)

  High-level registration call in registerSecurityTools that invokes registerAuthenticationTools, which registers the auth_status tool among others.
  registerAuthenticationTools(server);
• src/utils/authManager.ts:6-15 (helper)

  AuthState interface defining the structure of authentication state used by getAuthState() and processed in the auth_status handler.
  export interface AuthState { type: 'token' | 'oauth2' | 'basic' | 'none'; token?: string; refreshToken?: string; tokenExpiry?: Date; username?: string; password?: string; // Note: In a production app, we'd use more secure storage oauthTokens?: any; headers?: Record<string, string>; }