feat: add metadata in MCP Manifest for Toolbox auth by Yuan325 · Pull Request #1395 · googleapis/mcp-toolbox

Yuan325 · 2025-09-09T21:55:36Z

Add _meta for tools/list method in MCP Toolbox.

If there are authorized invocation, the following will be return in _meta:

{
    "name":"my-tool-name",
    "description":"my tool description",
     "inputSchema":{
        "type":"object",
         "properties":{
             "user_id":{"type":"string","description":"user's name from google login"}
         },
         "required":["user_id"]
     },
     "_meta":{
         "toolbox/authParam":{"user_id":["my_auth"]}
     }
}

If there are authenticated parameter, the following will be return in _meta:

{
    "name":"my-tool-name",
    "description":"my tool description",
    "inputSchema":{
        "type":"object",
        "properties":{
            "sql":{"type":"string","description":"The sql to execute."}
        },
        "required":["sql"]
    },
    "_meta":{
        "toolbox/authInvoke":["my_auth"]
    }
}

If there are no authorized invocation or authenticated prameter, the _meta field will be omitted.

With this feature, the following were updated in the source code:

In each func(p CommonParameter) McpManifest(), we will return a []string for the list of authenticated parameters. This is similar to how Manifest() return the list of authNames in non-MCP Toolbox's manifest.
The func(ps Parameters) McpManifest() will return a map[string][]string that with key as param's name, and value as the param's auth.
Added a new function GetMcpManifest() in tools.go. This function will consctruct the McpManifest, and add the Metadata field.
Associated tests were added or updated.

Add `_meta` for `tools/list` method in MCP Toolbox. If there are authorized invocation, the following will be return in `_meta`: ``` { "name":"my-tool-name", "description":"my tool description", "inputSchema":{ "type":"object", "properties":{ "user_id":{"type":"string","description":"user's name from google login"} }, "required":["user_id"] }, "_meta":{ "toolbox/authParam":{"user_id":["my_auth"]} } } ``` If there are authenticated parameter, the following will be return in `_meta`: ``` { "name":"my-tool-name", "description":"my tool description", "inputSchema":{ "type":"object", "properties":{ "sql":{"type":"string","description":"The sql to execute."} }, "required":["sql"] }, "_meta":{ "toolbox/authInvoke":["my_auth"] } } ``` If there are no authorized invocation or authenticated prameter, the `_meta` field will be omitted. With this feature, the following were updated in the source code: * In each `func(p CommonParameter) McpManifest()`, we will return a `[]string` for the list of authenticated parameters. This is similar to how Manifest() return the list of authNames in non-MCP Toolbox's manifest. * The `func(ps Parameters) McpManifest()` will return a `map[string][]string` that with key as param's name, and value as the param's auth. * Added a new function `GetMcpManifest()` in `tools.go`. This function will consctruct the McpManifest, and add the `Metadata` field. * Associated tests were added or updated.

🤖 I have created a release *beep* *boop* --- ## [0.17.0](v0.16.0...v0.17.0) (2025-10-10) ### ⚠ BREAKING CHANGES * **tools/bigquery-get-table-info:** add allowed dataset support ([#1093](#1093)) * **tool/bigquery-list-dataset-ids:** add allowed datasets support ([#1573](#1573)) ### Features * Add configs and workflows for docs versioning ([#1611](#1611)) ([21ac98b](21ac98b)) * Add metadata in MCP Manifest for Toolbox auth ([#1395](#1395)) ([0b3dac4](0b3dac4)) * Add program name to MySQL connections ([#1617](#1617)) ([c4a22b8](c4a22b8)) * **source/bigquery:** Add optional write mode config ([#1157](#1157)) ([63adc78](63adc78)) * **sources/mssql:** Add app name to MSSQL ([#1620](#1620)) ([1536d1f](1536d1f)) * **sources/oracle:** Add Oracle Source and Tool ([#1456](#1456)) ([3a19a50](3a19a50)) * **tool/bigquery-list-dataset-ids:** Add allowed datasets support ([#1573](#1573)) ([1a44c67](1a44c67)) * **tools/bigquery-get-table-info:** Add allowed dataset support ([#1093](#1093)) ([acb205c](acb205c)) * **tools/dataform:** Add dataform compile tool ([#1470](#1470)) ([3be9b7b](3be9b7b)) * **tools/looker:** Add support for pulse, vacuum and analyze audit and performance functions on a Looker instance ([#1581](#1581)) ([5aed4e1](5aed4e1)) * **tools/looker:** Enable access to the Conversational Analytics API for Looker ([#1596](#1596)) ([2d5a93e](2d5a93e)) ### Bug Fixes * Added google_ml_integration extension to use alloydb ai-nl support api ([#1445](#1445)) ([dbc477a](dbc477a)) * Fix broken links ([#1625](#1625)) ([36c6584](36c6584)) * Remove duplicated build type in Dockerfile ([#1598](#1598)) ([b43c945](b43c945)) * **source/bigquery:** Allowed datasets project id issue with client oauth ([#1663](#1663)) ([f4cf486](f4cf486)) * **sources/looker:** Allow Looker to be configured without setting a Client Id or Secret ([#1496](#1496)) ([67d8221](67d8221)) * **tools/looker:** Refactor run-inline-query logic to helper function ([#1497](#1497)) ([62af39d](62af39d)) * **tools/mysql-list-tables:** Update sql query to resolve subquery scope error ([#1629](#1629)) ([94e19d8](94e19d8)) ### Miscellaneous Chores * Release 0.17.0 ([#1676](#1676)) ([7e22cb4](7e22cb4)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). --------- Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com> Co-authored-by: Wenxin Du <117315983+duwenxin99@users.noreply.github.com>

🤖 I have created a release *beep* *boop* --- ## [0.17.0](v0.16.0...v0.17.0) (2025-10-10) ### ⚠ BREAKING CHANGES * **tools/bigquery-get-table-info:** add allowed dataset support ([#1093](#1093)) * **tool/bigquery-list-dataset-ids:** add allowed datasets support ([#1573](#1573)) ### Features * Add configs and workflows for docs versioning ([#1611](#1611)) ([21ac98b](21ac98b)) * Add metadata in MCP Manifest for Toolbox auth ([#1395](#1395)) ([0b3dac4](0b3dac4)) * Add program name to MySQL connections ([#1617](#1617)) ([c4a22b8](c4a22b8)) * **oracle:** Switch Oracle driver from godror to go-ora ([#1685](#1685)) ([8faf376](8faf376)) * **source/bigquery:** Add optional write mode config ([#1157](#1157)) ([63adc78](63adc78)) * **sources/alloydb,cloudsqlpg,cloudsqlmysql,cloudsqlmssql:** Support PSC connection ([#1686](#1686)) ([9d2bf79](9d2bf79)) * **sources/mssql:** Add app name to MSSQL ([#1620](#1620)) ([1536d1f](1536d1f)) * **sources/oracle:** Add Oracle Source and Tool ([#1456](#1456)) ([3a19a50](3a19a50)) * **tool/bigquery-list-dataset-ids:** Add allowed datasets support ([#1573](#1573)) ([1a44c67](1a44c67)) * **tools/bigquery-get-table-info:** Add allowed dataset support ([#1093](#1093)) ([acb205c](acb205c)) * **tools/dataform:** Add dataform compile tool ([#1470](#1470)) ([3be9b7b](3be9b7b)) * **tools/looker:** Add support for pulse, vacuum and analyze audit and performance functions on a Looker instance ([#1581](#1581)) ([5aed4e1](5aed4e1)) * **tools/looker:** Enable access to the Conversational Analytics API for Looker ([#1596](#1596)) ([2d5a93e](2d5a93e)) ### Bug Fixes * Added google_ml_integration extension to use alloydb ai-nl support api ([#1445](#1445)) ([dbc477a](dbc477a)) * Fix broken links ([#1625](#1625)) ([36c6584](36c6584)) * Remove duplicated build type in Dockerfile ([#1598](#1598)) ([b43c945](b43c945)) * **source/bigquery:** Allowed datasets project id issue with client oauth ([#1663](#1663)) ([f4cf486](f4cf486)) * **sources/looker:** Allow Looker to be configured without setting a Client Id or Secret ([#1496](#1496)) ([67d8221](67d8221)) * **tools/looker:** Refactor run-inline-query logic to helper function ([#1497](#1497)) ([62af39d](62af39d)) * **tools/mysql-list-tables:** Update sql query to resolve subquery scope error ([#1629](#1629)) ([94e19d8](94e19d8)) ### Miscellaneous Chores * Release 0.17.0 ([#1676](#1676)) ([7e22cb4](7e22cb4)) * Release 0.17.0 ([#1681](#1681)) ([18c92b5](18c92b5)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). --------- Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com> Co-authored-by: Wenxin Du <117315983+duwenxin99@users.noreply.github.com>

🤖 I have created a release *beep* *boop* --- ## [0.17.0](v0.16.0...v0.17.0) (2025-10-10) ### ⚠ BREAKING CHANGES * **tools/bigquery-get-table-info:** add allowed dataset support ([#1093](#1093)) * **tool/bigquery-list-dataset-ids:** add allowed datasets support ([#1573](#1573)) ### Features * Add configs and workflows for docs versioning ([#1611](#1611)) ([21ac98b](21ac98b)) * Add metadata in MCP Manifest for Toolbox auth ([#1395](#1395)) ([0b3dac4](0b3dac4)) * Add program name to MySQL connections ([#1617](#1617)) ([c4a22b8](c4a22b8)) * **oracle:** Switch Oracle driver from godror to go-ora ([#1685](#1685)) ([8faf376](8faf376)) * **source/bigquery:** Add optional write mode config ([#1157](#1157)) ([63adc78](63adc78)) * **sources/alloydb,cloudsqlpg,cloudsqlmysql,cloudsqlmssql:** Support PSC connection ([#1686](#1686)) ([9d2bf79](9d2bf79)) * **sources/mssql:** Add app name to MSSQL ([#1620](#1620)) ([1536d1f](1536d1f)) * **sources/oracle:** Add Oracle Source and Tool ([#1456](#1456)) ([3a19a50](3a19a50)) * **tool/bigquery-list-dataset-ids:** Add allowed datasets support ([#1573](#1573)) ([1a44c67](1a44c67)) * **tools/bigquery-get-table-info:** Add allowed dataset support ([#1093](#1093)) ([acb205c](acb205c)) * **tools/dataform:** Add dataform compile tool ([#1470](#1470)) ([3be9b7b](3be9b7b)) * **tools/looker:** Add support for pulse, vacuum and analyze audit and performance functions on a Looker instance ([#1581](#1581)) ([5aed4e1](5aed4e1)) * **tools/looker:** Enable access to the Conversational Analytics API for Looker ([#1596](#1596)) ([2d5a93e](2d5a93e)) ### Bug Fixes * Added google_ml_integration extension to use alloydb ai-nl support api ([#1445](#1445)) ([dbc477a](dbc477a)) * Fix broken links ([#1625](#1625)) ([36c6584](36c6584)) * Remove duplicated build type in Dockerfile ([#1598](#1598)) ([b43c945](b43c945)) * **source/bigquery:** Allowed datasets project id issue with client oauth ([#1663](#1663)) ([f4cf486](f4cf486)) * **sources/looker:** Allow Looker to be configured without setting a Client Id or Secret ([#1496](#1496)) ([67d8221](67d8221)) * **tools/looker:** Refactor run-inline-query logic to helper function ([#1497](#1497)) ([62af39d](62af39d)) * **tools/mysql-list-tables:** Update sql query to resolve subquery scope error ([#1629](#1629)) ([94e19d8](94e19d8)) ### Miscellaneous Chores * Release 0.17.0 ([#1676](#1676)) ([7e22cb4](7e22cb4)) * Release 0.17.0 ([#1681](#1681)) ([18c92b5](18c92b5)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). --------- Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com> Co-authored-by: Wenxin Du <117315983+duwenxin99@users.noreply.github.com> de19d52

🤖 I have created a release *beep* *boop* --- ## [0.17.0](googleapis/mcp-toolbox@v0.16.0...v0.17.0) (2025-10-10) ### ⚠ BREAKING CHANGES * **tools/bigquery-get-table-info:** add allowed dataset support ([googleapis#1093](googleapis#1093)) * **tool/bigquery-list-dataset-ids:** add allowed datasets support ([googleapis#1573](googleapis#1573)) ### Features * Add configs and workflows for docs versioning ([googleapis#1611](googleapis#1611)) ([21ac98b](googleapis@21ac98b)) * Add metadata in MCP Manifest for Toolbox auth ([googleapis#1395](googleapis#1395)) ([0b3dac4](googleapis@0b3dac4)) * Add program name to MySQL connections ([googleapis#1617](googleapis#1617)) ([c4a22b8](googleapis@c4a22b8)) * **oracle:** Switch Oracle driver from godror to go-ora ([googleapis#1685](googleapis#1685)) ([8faf376](googleapis@8faf376)) * **source/bigquery:** Add optional write mode config ([googleapis#1157](googleapis#1157)) ([63adc78](googleapis@63adc78)) * **sources/alloydb,cloudsqlpg,cloudsqlmysql,cloudsqlmssql:** Support PSC connection ([googleapis#1686](googleapis#1686)) ([9d2bf79](googleapis@9d2bf79)) * **sources/mssql:** Add app name to MSSQL ([googleapis#1620](googleapis#1620)) ([1536d1f](googleapis@1536d1f)) * **sources/oracle:** Add Oracle Source and Tool ([googleapis#1456](googleapis#1456)) ([3a19a50](googleapis@3a19a50)) * **tool/bigquery-list-dataset-ids:** Add allowed datasets support ([googleapis#1573](googleapis#1573)) ([1a44c67](googleapis@1a44c67)) * **tools/bigquery-get-table-info:** Add allowed dataset support ([googleapis#1093](googleapis#1093)) ([acb205c](googleapis@acb205c)) * **tools/dataform:** Add dataform compile tool ([googleapis#1470](googleapis#1470)) ([3be9b7b](googleapis@3be9b7b)) * **tools/looker:** Add support for pulse, vacuum and analyze audit and performance functions on a Looker instance ([googleapis#1581](googleapis#1581)) ([5aed4e1](googleapis@5aed4e1)) * **tools/looker:** Enable access to the Conversational Analytics API for Looker ([googleapis#1596](googleapis#1596)) ([2d5a93e](googleapis@2d5a93e)) ### Bug Fixes * Added google_ml_integration extension to use alloydb ai-nl support api ([googleapis#1445](googleapis#1445)) ([dbc477a](googleapis@dbc477a)) * Fix broken links ([googleapis#1625](googleapis#1625)) ([36c6584](googleapis@36c6584)) * Remove duplicated build type in Dockerfile ([googleapis#1598](googleapis#1598)) ([b43c945](googleapis@b43c945)) * **source/bigquery:** Allowed datasets project id issue with client oauth ([googleapis#1663](googleapis#1663)) ([f4cf486](googleapis@f4cf486)) * **sources/looker:** Allow Looker to be configured without setting a Client Id or Secret ([googleapis#1496](googleapis#1496)) ([67d8221](googleapis@67d8221)) * **tools/looker:** Refactor run-inline-query logic to helper function ([googleapis#1497](googleapis#1497)) ([62af39d](googleapis@62af39d)) * **tools/mysql-list-tables:** Update sql query to resolve subquery scope error ([googleapis#1629](googleapis#1629)) ([94e19d8](googleapis@94e19d8)) ### Miscellaneous Chores * Release 0.17.0 ([googleapis#1676](googleapis#1676)) ([7e22cb4](googleapis@7e22cb4)) * Release 0.17.0 ([googleapis#1681](googleapis#1681)) ([18c92b5](googleapis@18c92b5)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). --------- Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com> Co-authored-by: Wenxin Du <117315983+duwenxin99@users.noreply.github.com> de19d52

🤖 I have created a release *beep* *boop* --- ## [0.17.0](googleapis/mcp-toolbox@v0.16.0...v0.17.0) (2025-10-10) ### ⚠ BREAKING CHANGES * **tools/bigquery-get-table-info:** add allowed dataset support ([#1093](googleapis/mcp-toolbox#1093)) * **tool/bigquery-list-dataset-ids:** add allowed datasets support ([#1573](googleapis/mcp-toolbox#1573)) ### Features * Add configs and workflows for docs versioning ([#1611](googleapis/mcp-toolbox#1611)) ([21ac98b](googleapis/mcp-toolbox@21ac98b)) * Add metadata in MCP Manifest for Toolbox auth ([#1395](googleapis/mcp-toolbox#1395)) ([0b3dac4](googleapis/mcp-toolbox@0b3dac4)) * Add program name to MySQL connections ([#1617](googleapis/mcp-toolbox#1617)) ([c4a22b8](googleapis/mcp-toolbox@c4a22b8)) * **oracle:** Switch Oracle driver from godror to go-ora ([#1685](googleapis/mcp-toolbox#1685)) ([8faf376](googleapis/mcp-toolbox@8faf376)) * **source/bigquery:** Add optional write mode config ([#1157](googleapis/mcp-toolbox#1157)) ([63adc78](googleapis/mcp-toolbox@63adc78)) * **sources/alloydb,cloudsqlpg,cloudsqlmysql,cloudsqlmssql:** Support PSC connection ([#1686](googleapis/mcp-toolbox#1686)) ([9d2bf79](googleapis/mcp-toolbox@9d2bf79)) * **sources/mssql:** Add app name to MSSQL ([#1620](googleapis/mcp-toolbox#1620)) ([1536d1f](googleapis/mcp-toolbox@1536d1f)) * **sources/oracle:** Add Oracle Source and Tool ([#1456](googleapis/mcp-toolbox#1456)) ([3a19a50](googleapis/mcp-toolbox@3a19a50)) * **tool/bigquery-list-dataset-ids:** Add allowed datasets support ([#1573](googleapis/mcp-toolbox#1573)) ([1a44c67](googleapis/mcp-toolbox@1a44c67)) * **tools/bigquery-get-table-info:** Add allowed dataset support ([#1093](googleapis/mcp-toolbox#1093)) ([acb205c](googleapis/mcp-toolbox@acb205c)) * **tools/dataform:** Add dataform compile tool ([#1470](googleapis/mcp-toolbox#1470)) ([3be9b7b](googleapis/mcp-toolbox@3be9b7b)) * **tools/looker:** Add support for pulse, vacuum and analyze audit and performance functions on a Looker instance ([#1581](googleapis/mcp-toolbox#1581)) ([5aed4e1](googleapis/mcp-toolbox@5aed4e1)) * **tools/looker:** Enable access to the Conversational Analytics API for Looker ([#1596](googleapis/mcp-toolbox#1596)) ([2d5a93e](googleapis/mcp-toolbox@2d5a93e)) ### Bug Fixes * Added google_ml_integration extension to use alloydb ai-nl support api ([#1445](googleapis/mcp-toolbox#1445)) ([dbc477a](googleapis/mcp-toolbox@dbc477a)) * Fix broken links ([#1625](googleapis/mcp-toolbox#1625)) ([36c6584](googleapis/mcp-toolbox@36c6584)) * Remove duplicated build type in Dockerfile ([#1598](googleapis/mcp-toolbox#1598)) ([b43c945](googleapis/mcp-toolbox@b43c945)) * **source/bigquery:** Allowed datasets project id issue with client oauth ([#1663](googleapis/mcp-toolbox#1663)) ([f4cf486](googleapis/mcp-toolbox@f4cf486)) * **sources/looker:** Allow Looker to be configured without setting a Client Id or Secret ([#1496](googleapis/mcp-toolbox#1496)) ([67d8221](googleapis/mcp-toolbox@67d8221)) * **tools/looker:** Refactor run-inline-query logic to helper function ([#1497](googleapis/mcp-toolbox#1497)) ([62af39d](googleapis/mcp-toolbox@62af39d)) * **tools/mysql-list-tables:** Update sql query to resolve subquery scope error ([#1629](googleapis/mcp-toolbox#1629)) ([94e19d8](googleapis/mcp-toolbox@94e19d8)) ### Miscellaneous Chores * Release 0.17.0 ([#1676](googleapis/mcp-toolbox#1676)) ([7e22cb4](googleapis/mcp-toolbox@7e22cb4)) * Release 0.17.0 ([#1681](googleapis/mcp-toolbox#1681)) ([18c92b5](googleapis/mcp-toolbox@18c92b5)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). --------- Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com> Co-authored-by: Wenxin Du <117315983+duwenxin99@users.noreply.github.com>

Yuan325 requested a review from a team September 9, 2025 21:55

blunderbuss-gcf Bot assigned duwenxin99 Sep 9, 2025

Yuan325 force-pushed the tools-list-metadata branch 4 times, most recently from e532d87 to 2bfcb50 Compare September 9, 2025 22:27

duwenxin99 requested changes Sep 10, 2025

View reviewed changes

Comment thread internal/tools/parameters.go Outdated

Yuan325 requested a review from duwenxin99 September 10, 2025 23:32

Yuan325 force-pushed the tools-list-metadata branch from d262ca0 to 7032824 Compare September 10, 2025 23:34

twishabansal mentioned this pull request Sep 11, 2025

feat: Add support for auth related features googleapis/mcp-toolbox-sdk-python#363

Merged

twishabansal mentioned this pull request Sep 23, 2025

feat: Make mcp the default protocol googleapis/mcp-toolbox-sdk-python#364

Merged

Yuan325 added 3 commits September 26, 2025 10:51

feat: add metadata in MCP Manifest for Toolbox auth

284493a

update authNames to authServiceNames

5aec844

add more tools after rebase

cbb4d58

Yuan325 force-pushed the tools-list-metadata branch from 7032824 to cbb4d58 Compare September 26, 2025 18:04

duwenxin99 approved these changes Sep 26, 2025

View reviewed changes

Comment thread internal/server/common_test.go Outdated

Yuan325 added 2 commits September 26, 2025 17:28

Merge branch 'main' into tools-list-metadata

f1753bd

Update common_test.go

6fa7f9b

Yuan325 merged commit 0b3dac4 into main Sep 27, 2025
11 checks passed

Yuan325 deleted the tools-list-metadata branch September 27, 2025 00:48

release-please Bot mentioned this pull request Sep 26, 2025

chore(main): release 0.17.0 #1578

Merged

release-please Bot mentioned this pull request Oct 10, 2025

chore(main): release 0.17.0 #1682

Merged

BrewTestBot mentioned this pull request Oct 10, 2025

mcp-toolbox 0.17.0 Homebrew/homebrew-core#248594

Merged

release-please Bot mentioned this pull request Nov 7, 2025

chore(main): release 0.19.1 #1901

Merged

twishabansal mentioned this pull request Jan 12, 2026

feat: add MCP v20241105 googleapis/mcp-toolbox-sdk-js#189

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: add metadata in MCP Manifest for Toolbox auth#1395

feat: add metadata in MCP Manifest for Toolbox auth#1395
Yuan325 merged 5 commits into
mainfrom
tools-list-metadata

Yuan325 commented Sep 9, 2025 •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

Yuan325 commented Sep 9, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Yuan325 commented Sep 9, 2025 •

edited

Loading