MCP Integration (Model Context Protocol)

Embedded MCP HTTP

Optional stateless HTTP transport for tools and clients.
Access Control

Allowed hosts/origins, optional API key, DNS rebinding protection.
Defaults

Per-endpoint defaults for retrieval mode and Top-K.

Stateless Mode

Keep the embedded MCP HTTP endpoint stateless for easier scaling and isolation.

Path and CORS

Align mount_path, allowed_hosts, and allowed_origins with your reverse proxy and UI origin to avoid CORS issues.

Auth

Use require_api_key=true in multi-tenant or exposed deployments.

Configuration (Selected)

Field	Default	Description
`mcp.enabled`	true	Enable embedded MCP HTTP endpoint
`mcp.mount_path`	`/mcp`	URL path for MCP endpoint
`mcp.stateless_http`	true	Stateless mode
`mcp.json_response`	true	Prefer JSON responses
`mcp.enable_dns_rebinding_protection`	true	Defense in depth
`mcp.allowed_hosts`	`localhost:*`	Allowed Host headers
`mcp.allowed_origins`	`http://localhost:*`	Allowed Origin values
`mcp.require_api_key`	false	Require `Authorization: Bearer`
`mcp.default_top_k`	20	Default Top-K when omitted
`mcp.default_mode`	`tribrid`	Default retrieval mode

flowchart LR
    Client["MCP Client"] --> HTTP["HTTP /mcp"]
    HTTP --> RAG["TriBridRAG Tools"]
    RAG --> Search["Search / Answer"]

Python

import httpx
status = httpx.get("http://localhost:8000/mcp/status").json()
print(status)

curl

curl -sS http://localhost:8000/mcp/status | jq .

TypeScript

async function mcpStatus() {
  const s = await (await fetch('/mcp/status')).json();
  console.log(s);
}