Skip to content
- Endpoint: frontend controller
kv_mcp_connector.mcp (trusted controller, POST only, Cache-Control: no-store, X-Robots-Tag: noindex). GET answers 405 (no server-to-client stream), OPTIONS 204.
- Classes in
app/addons/kv_mcp_connector/Tygh/Addons/KvMcpConnector/: Server (JSON-RPC, auth, rate limit), Tools (tool catalog and handlers; reads are plain SQL limited by Config::orderScope() / Config::productScope()), Changes (change requests, stale guard, apply through fn_update_product() and fn_change_order_status()), Tokens, Log.
- Tables:
?:kv_mcp_tokens (hashed tokens), ?:kv_mcp_changes, ?:kv_mcp_log.
- Tool names, descriptions and input schemas are protocol text for AI clients and stay in English in
Tools::catalog().
- Description HTML written by an agent is cleaned of scripts, iframes, event handlers and
javascript: URLs before it is stored in a change request.
