Module exposure 

Host-owned, per-stream tool visibility. Discovery never grants execution.

Structs

McpExposureSnapshot

Frozen visibility over unchanged descriptors. Safe to retain during a batch.

McpToolExposure

Fresh for each chat stream; never inherited as a parent’s activation handle.

Constants

MCP_EAGER_TOOL_LIMIT

Maximum MCP descriptors advertised in one model step, excluding controls.

MCP_SEARCH_QUERY_LIMIT

Bounded model input for local descriptor matching, in Unicode characters.

MCP_SEARCH_RESULT_LIMIT

Maximum deferred descriptors selected by one search call.