Roadmap

Roadmap

Shipped (1.1.0)

• MCP 1.0 compliant protocol: initialize with version negotiation, notifications/initialized, ping, tools/list, tools/call
• stdio and streamable HTTP transports sharing one protocol layer
• Decorator tool registry with JSON Schema generated from type hints
• Input argument validation and optional output schema validation
• Structured tool results (structuredContent) for dict-returning tools
• API key auth (constant-time) and OAuth 2.1 resource server (JWKS validation)
• OAuth 2.1 PKCE client flow via mcp-toolkit login
• Per-client token-bucket rate limiting
• OpenTelemetry span export per tool call, structured logging to stderr
• CLI: run, doctor, init, login
• Sandboxed filesystem plugin and SarmaLink-AI plugin
• Reproducible uv-based container image, non-root, with a health check
• End-to-end test suite across protocol, transports, auth, and plugins

Planned

• Resource and prompt registries (currently tools only)
• Server-Sent Events streaming for long-running tool calls over HTTP
• Dynamic Client Registration (RFC 7591) for the OAuth flow
• Plugin: Postgres query tool with a read-only DSN
• Plugin: GitHub (issues, PRs, code search)
• Distributed rate limiter backed by Redis for multi-replica deployments
• Per-user audit log

Not planned

• Visual GUI builder (this is code-first)
• Bundled inference (use a separate model service)
• Plugin marketplace (use git for distribution)
• Framework swaps (FastAPI stays)
• Sync-only handlers (everything is async)

How to contribute

PRs welcome. Pick something from "Planned", open an issue saying you are taking it, fork, branch, push, and open a PR. Releases are at GitHub Releases.