+--------------------+          +------------------+
              |  Internal caller   |          |  Internal agent  |
              |  (any HTTP client) |          |  (http)          |
              +---------+----------+          +---------+--------+
                        |                               |
                        |               X-Bank-Identity |
                        v                               v
                    +---+-------------------------------+---+
                    |          Tool gateway (this repo)      |
                    |  transport -> registry.call -> handler |
                    |                    |                   |
                    |            rbac.check + audit.write    |
                    +----+-----------------+----------+------+
                         |                 |          |
                         v                 v          v
                +------------------+  +---------+  +------------------+
                | internal APIs    |  | Postgres|  | Prometheus       |
                | (customer,       |  | audit   |  | metrics scraped  |
                | statements,      |  | log     |  | at /metrics      |
                | disputes)        |  +---------+  +------------------+
                +------------------+

pip install -r requirements.txt
python -m examples.smoke     # in-process server + client, exits 0
PYTHONPATH=src pytest -q     # 31 passed

1. client lists tools
  - customer_360.lookup: Look up a customer 360 view: profile, primary account...
  - statement_search.query: Search a customer's statements. Supports date range...
  - dispute_resolution.open: Open a dispute against a specific transaction...
  - dispute_resolution.status: Get the current status of an open dispute by id.

2. customer_360.lookup  (allowed for svc-analyst-01)
{
  "result": {
    "profile": {
      "name": "Jane A. Doe",
      "email": "[REDACTED]<email>",
      "ssn": "[REDACTED]<ssn>",
      "notes": "primary card [REDACTED]<pan>on file; backup acct [REDACTED]<acct>"
    },
    ...
  }
}

5. dispute_resolution.open  (DENIED for svc-analyst-01 by RBAC)
{
  "error": {
    "code": "forbidden",
    "message": "identity 'svc-analyst-01' is not permitted to call 'dispute_resolution.open'",
    ...
  }
}

6. audit log rows (read back from sqlite; args redacted)
  [ok   ] identity=svc-analyst-01         tool=customer_360.lookup        error=-
          args_redacted={"customer_id": "C-[REDACTED]<acct>"}
  [ok   ] identity=svc-dispute-agent-07   tool=dispute_resolution.open    error=-
          args_redacted={... "notes": "caller gave card [REDACTED]<pan>and ssn [REDACTED]<ssn>"}
  [deny ] identity=svc-analyst-01         tool=dispute_resolution.open    error=forbidden

  4 audit rows written, no raw PAN/SSN present.

SMOKE OK

31 passed in 1.21s

docker compose up --build
# server on :8080, prometheus on :9090, postgres on :5432
curl -s -X POST http://localhost:8080/mcp/call \
  -H "X-Bank-Identity: svc-analyst-01" \
  -H "Content-Type: application/json" \
  -d '{"tool":"customer_360.lookup","args":{"customer_id":"C-01234567"}}'

pip install -e '.[dev]'
export AUDIT_DB_URL=sqlite:///./audit.db   # or a postgres url
make run-http                              # serves on :8080

{
  "error": {
    "code": "forbidden",
    "message": "identity 'svc-analyst-01' is not permitted to call 'dispute_resolution.open'",
    "request_id": "0d3f4a...",
    "tool": "dispute_resolution.open",
    "retryable": false,
    "details": {}
  }
}

src/
  mcp_server/       server, registry, rbac, audit, redaction, tools/
  mcp_client/       http client used for testing and examples
configs/            default.yaml, rbac.yaml, prometheus.yml
terraform/          aws vpc + ecs + rds reference layout
tests/              rbac, audit, redaction, tools, registry
examples/           request/response transcripts
docs/               architecture, rbac model