Package burp.mcp.server

Class AccessGate

java.lang.Object

burp.mcp.server.AccessGate

public class AccessGate
extends Object

Evaluates permission policy and Burp target scope for a tool call and resolves "prompt" outcomes through the operator UI via ApprovalManager.

Decision protocol: gated calls wait up to the configured approval window for an operator decision. If the operator answers in time the call is allowed or denied immediately; otherwise the caller receives an APPROVAL_PENDING result and can retry the identical call while the request stays queued for its TTL.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static enum	AccessGate.Kind
static final class	AccessGate.Result	Outcome of a gate evaluation.
static interface	AccessGate.Settings	Config seams so tests can pin enforcement without the McpConfig singleton.

Constructor Summary

Constructors

Constructor	Description
AccessGate(burp.api.montoya.MontoyaApi api, PermissionManager permissions, ApprovalManager approvals)
AccessGate(burp.api.montoya.MontoyaApi api, PermissionManager permissions, ApprovalManager approvals, AccessGate.Settings settings)

Method Summary

Modifier and Type	Method	Description
AccessGate.Result	check(String clientIp, String toolName, Map<String,Object> args, List<String> targets)	Evaluate a tool call.
void	onServerStop()	Cancel every queued approval; called when the server stops.
static String	originOf(String url)	Lowercase scheme://host[:port], default ports omitted; null when unparsable.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

AccessGate

public AccessGate(burp.api.montoya.MontoyaApi api,
 PermissionManager permissions,
 ApprovalManager approvals)

AccessGate

public AccessGate(burp.api.montoya.MontoyaApi api,
 PermissionManager permissions,
 ApprovalManager approvals,
 AccessGate.Settings settings)

Method Details

check

public AccessGate.Result check(String clientIp,
 String toolName,
 Map<String,Object> args,
 List<String> targets)

Evaluate a tool call.

Parameters:

clientIp - caller identity so retries match the same pending request

toolName - canonical tool name

args - tool arguments (used only for the fingerprint/summary)

targets - target URLs derived from TargetedTool

onServerStop

public void onServerStop()

Cancel every queued approval; called when the server stops.

originOf

public static String originOf(String url)

Lowercase scheme://host[:port], default ports omitted; null when unparsable.