Merge pull request #208 from ShipSecAI/eng-96/tool-registry

feat(mcp): add Tool Registry Service for agent tool credentials

Author: betterclever

.ai/zod-first-migration.md

@@ -17,62 +17,63 @@
     "delete:runs": "bun scripts/delete-all-workflow-runs.ts"
   },
   "dependencies": {
-    "@clerk/backend": "^2.9.4",
-    "@clerk/types": "^4.81.0",
-    "@grpc/grpc-js": "^1.14.0",
-    "@nestjs/common": "^10.4.0",
-    "@nestjs/config": "^3.2.0",
-    "@nestjs/core": "^10.4.0",
-    "@nestjs/platform-express": "^10.4.0",
-    "@nestjs/swagger": "^11.2.0",
+    "@clerk/backend": "^2.29.5",
+    "@clerk/types": "^4.101.13",
+    "@grpc/grpc-js": "^1.14.3",
+    "@nestjs/common": "^10.4.22",
+    "@nestjs/config": "^3.3.0",
+    "@nestjs/core": "^10.4.22",
+    "@nestjs/platform-express": "^10.4.22",
+    "@nestjs/swagger": "^11.2.5",
     "@shipsec/component-sdk": "workspace:*",
     "@shipsec/shared": "workspace:*",
     "@shipsec/studio-worker": "workspace:*",
-    "@temporalio/client": "^1.11.3",
-    "@temporalio/worker": "^1.11.3",
-    "@temporalio/workflow": "^1.11.3",
-    "@types/express": "^5.0.3",
+    "@temporalio/client": "^1.14.1",
+    "@temporalio/worker": "^1.14.1",
+    "@temporalio/workflow": "^1.14.1",
+    "@types/express": "^5.0.6",
     "@types/minio": "^7.1.1",
-    "ai": "^6.0.0-beta.68",
+    "ai": "^6.0.49",
     "bcryptjs": "^3.0.3",
     "class-transformer": "^0.5.1",
-    "class-validator": "^0.14.1",
+    "class-validator": "^0.14.3",
     "date-fns": "^4.1.0",
     "dotenv": "^17.2.3",
-    "drizzle-orm": "^0.44.6",
-    "ioredis": "^5.4.1",
+    "drizzle-orm": "^0.44.7",
+    "express": "^5.2.1",
+    "ioredis": "^5.9.2",
     "kafkajs": "^2.2.4",
-    "long": "^5.2.4",
+    "long": "^5.3.2",
     "minio": "^8.0.6",
     "multer": "^2.0.2",
-    "nestjs-zod": "^5.0.1",
-    "pg": "^8.16.3",
-    "posthog-node": "^5.17.2",
+    "nestjs-zod": "^5.1.1",
+    "pg": "^8.17.2",
+    "posthog-node": "^5.24.2",
     "reflect-metadata": "^0.2.2",
     "swagger-ui-express": "^5.0.1",
-    "zod": "^4.1.12"
+    "zod": "^4.3.6"
   },
   "devDependencies": {
     "@eslint/js": "^9.39.2",
-    "@nestjs/testing": "^10.4.0",
+    "@nestjs/testing": "^10.4.22",
     "@types/bcryptjs": "^3.0.0",
-    "@types/express-serve-static-core": "^4.19.6",
+    "@types/express-serve-static-core": "^4.19.8",
     "@types/har-format": "^1.2.16",
     "@types/multer": "^2.0.0",
-    "@types/node": "^20.16.11",
-    "@types/pg": "^8.15.5",
+    "@types/node": "^20.19.30",
+    "@types/pg": "^8.16.0",
     "@types/supertest": "^2.0.16",
-    "@typescript-eslint/eslint-plugin": "^8.53.0",
-    "@typescript-eslint/parser": "^8.53.0",
-    "bun-types": "^1.2.23",
-    "drizzle-kit": "^0.31.5",
+    "@typescript-eslint/eslint-plugin": "^8.53.1",
+    "@typescript-eslint/parser": "^8.53.1",
+    "bun-types": "^1.3.6",
+    "drizzle-kit": "^0.31.8",
     "eslint": "^9.39.2",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-prettier": "^5.5.5",
-    "globals": "^17.0.0",
-    "prettier": "^3.8.0",
-    "supertest": "^7.1.4",
-    "typescript": "^5.6.3",
-    "typescript-eslint": "^8.53.0"
+    "globals": "^17.1.0",
+    "prettier": "^3.8.1",
+    "supertest": "^7.2.2",
+    "typescript": "^5.9.3",
+    "typescript-eslint": "^8.53.1"
   }
 }

backend/package.json

@@ -18,6 +18,7 @@ import { TestingSupportModule } from './testing/testing.module';
 import { IntegrationsModule } from './integrations/integrations.module';
 import { SchedulesModule } from './schedules/schedules.module';
 import { AnalyticsModule } from './analytics/analytics.module';
+import { McpModule } from './mcp/mcp.module';
 
 import { ApiKeysModule } from './api-keys/api-keys.module';
 import { WebhooksModule } from './webhooks/webhooks.module';
@@ -37,6 +38,7 @@ const coreModules = [
   ApiKeysModule,
   WebhooksModule,
   HumanInputsModule,
+  McpModule,
 ];
 
 const testingModules = process.env.NODE_ENV === 'production' ? [] : [TestingSupportModule];

backend/src/app.module.ts

@@ -6,6 +6,7 @@ import '@shipsec/studio-worker/components';
 import {
   componentRegistry,
   extractPorts,
+  getToolSchema,
   type CachedComponentMetadata,
 } from '@shipsec/component-sdk';
 import { categorizeComponent, getCategoryConfig } from './utils/categorization';
@@ -45,6 +46,8 @@ function serializeComponent(entry: CachedComponentMetadata) {
     outputs: entry.outputs ?? [],
     parameters: entry.parameters ?? [],
     examples: metadata.examples ?? [],
+    agentTool: metadata.agentTool ?? null,
+    toolSchema: metadata.agentTool?.enabled ? getToolSchema(component) : null,
   };
 }
 
@@ -221,6 +224,15 @@ export class ComponentsController {
             type: 'array',
             items: { type: 'string' },
           },
+          agentTool: {
+            type: 'object',
+            nullable: true,
+            properties: {
+              enabled: { type: 'boolean' },
+              toolName: { type: 'string', nullable: true },
+              toolDescription: { type: 'string', nullable: true },
+            },
+          },
         },
       },
     },
@@ -334,9 +346,17 @@ export class ComponentsController {
         },
         parameters: { type: 'array' },
         examples: { type: 'array' },
-        isLatest: { type: 'boolean', nullable: true },
         deprecated: { type: 'boolean', nullable: true },
         example: { type: 'string', nullable: true },
+        agentTool: {
+          type: 'object',
+          nullable: true,
+          properties: {
+            enabled: { type: 'boolean' },
+            toolName: { type: 'string', nullable: true },
+            toolDescription: { type: 'string', nullable: true },
+          },
+        },
       },
     },
   })

backend/src/components/components.controller.ts

@@ -12,6 +12,7 @@ const SUPPORTED_CATEGORIES: readonly ComponentCategory[] = [
   'input',
   'transform',
   'ai',
+  'mcp',
   'security',
   'it_ops',
   'notification',
@@ -41,6 +42,13 @@ const COMPONENT_CATEGORY_CONFIG: Record<ComponentCategory, ComponentCategoryConf
     emoji: '🤖',
     icon: 'Brain',
   },
+  mcp: {
+    label: 'MCP Servers',
+    color: 'text-teal-600',
+    description: 'Model Context Protocol servers and tool gateways',
+    emoji: '🔌',
+    icon: 'Plug',
+  },
   security: {
     label: 'Security Tools',
     color: 'text-red-600',