StateKnot
Docs · Start Overview Choose the right entry point and understand the pre-alpha boundary. Docs · Start Getting started Install the pinned toolchain and validate the repository locally. Docs · Start Core contract examples Compile the first Agent, typed Tool, Model stream, and explicit protocol mapping without runtime dependencies. Docs · Start Typed Agent Generate and pin typed schemas, then bind the first-party OpenAI and Anthropic adapters. Docs · Start In-process Agent Run a typed Agent without HTTP while preserving PostgreSQL durability, authorization, recovery, and owned roles. Docs · Start Durable admission Atomically commit authenticated intent, database time, the first event, and the initial checkpoint. Docs · Start Durable runs and results Submit with a durable ingress key, recover the original run, and read a verified public result. Docs · Understand Compile a graph Build a schema-pinned graph, validate its topology, and freeze its canonical digest. Docs · Understand Subgraphs and loops Compose shared-state subgraphs, finite loops, and explicit recovery-safe return paths. Docs · Understand Skill composition Choose capability bundles, shared-state subgraphs, durable child runs, and guarded MCP Skills without creating a second runtime. Docs · Understand Durability model Learn how journal, checkpoint, lease, fence, and recovery evidence fit together. Docs · Understand Durable Graph runtime Register exact executable code, replay noninitial state, and drive deterministic bounded sibling batches under one fence. Docs · Understand Durable Agent Loop Commit lifecycle handoffs and execute one tenant-scoped durable scheduling quantum. Docs · Understand Durable invocations Execute exact model and tool attempts with durable starts, staged ordered Tool coordination, streaming validation, and no-dispatch terminal recovery. Docs · Understand Provider-native Agent Compile and operate the durable multi-turn graph with bounded output repair, ordered parallel read-only Tools, write barriers, policy, accounting, and cancellation evidence. Docs · Integrate Local Rust Tools Generate digest-pinned schemas, register typed local code, and preserve the durable invocation boundary. Docs · Integrate AgentService v1 Authorize and expose exact durable Agent revisions through the versioned embedding boundary. Docs · Integrate Agent HTTP v1 Submit, recover, read and cancel through authenticated bounded JSON HTTP. Docs · Integrate General MCP Tool client Discover and call bounded stateless MCP 2026-07-28 Tools with JSON/SSE, OAuth, custom headers, and mediated MRTR. Docs · Integrate MCP OAuth client Bind one MCP resource to challenge-driven discovery, PKCE, issuer validation, durable credentials, and bounded replay. Docs · Integrate MCP Remote Tool Bind one strict stateless MCP 2026-07-28 Tool with pinned identity, schemas, durable dispatch, and reconciliation. Docs · Integrate MCP Server profile Expose bounded Tools, Resources, Prompts, Completion, and MRTR behind the strict stateless production boundary. Docs · Integrate MCP Skills Publish and activate Final SEP-2640 static Skills with immutable manifests, origin-scoped approval, and verified lazy reads. Docs · Integrate MCP conformance status See the frozen official runner inventory, implemented evidence, and exact boundary of current MCP claims. Docs · Integrate A2A 1.0 Client Discover and pin one agent, call all eleven operations, and reconcile durable unknown sends only through attested remote guarantees. Docs · Integrate Durable artifact storage Materialize terminal A2A parts into immutable PostgreSQL metadata and private integrity-checked object bytes. Docs · Integrate A2A 1.0 Server Expose bounded HTTP+JSON and JSON-RPC/SSE through identity-first policy and a durable service contract. Docs · Integrate A2A conformance status Inspect the frozen official TCK, audited harness patch, exact result, and server-only claim boundary. Docs · Operate Fair scheduling Configure replica-safe weighted tenant selection, exact starvation bounds, rollout, and retention. Docs · Operate PostgreSQL provider Configure, migrate, verify, and test the implemented durability provider. Docs · Operate Host qualification Record bounded capacity, recovery and fault evidence without turning CI into a production SLO claim. Docs · Project Versioning and releases Pin the public alpha exactly and understand compatibility, MSRV, durable-data, and release gates. Docs · Project Implementation status See what is implemented, in progress, and deliberately not claimed. Home Architecture map What exists, what is active, and what remains planned. Home Current cut Implemented slices and explicit gaps. Home Roadmap The path from contracts to a qualified v1. Repository Source code StateKnot/StateKnot on GitHub. Repository RFCs Draft architecture and durable execution contracts. Repository Security policy Private vulnerability reporting and support policy.
↑↓ navigate ↵ open 39 results

Pre-alpha documentation

Expose a bounded MCP Server without weakening policy.

Compose StateKnot-owned Tools, Resources, Prompts, Completion, and MRTR behind strict stateless HTTP, decoded authorization, and exact evidence.

Keep policy in the request path

  1. Validate Host, Origin, version metadata, and the streaming body limit.
  2. Authenticate the Bearer credential into a bounded principal.
  3. Apply caller-owned cross-replica admission and quota policy.
  4. Decode the JSON-RPC operation; transport headers remain hints.
  5. Authorize before existence or schema diagnostics are disclosed.
  6. Validate input, execute with cancellation, then validate the result.

Anonymous service construction fails unless every configured Host is literal loopback. Public deployments require TLS at the edge, Bearer authentication, explicit Host/Origin allowlists, and a shared admission implementation.

Advertise only configured surfaces

SurfaceStateKnot boundary
Tools Immutable executable registry, offline JSON Schema 2020-12 input and output validation, progress, cancellation, and bounded content.
Resources Absolute URI and template validation, authorization-first reads, MIME/Base64 limits, and explicit result cache policy.
Prompts Unique bounded arguments, authorization before diagnostics, and bounded multi-content messages.
Completion Optional capability; authenticated references and at most 100 unique, pagination-consistent values.
MRTR Bounded Elicitation/Sampling/Roots requests and integrity-protected, expiring, operation-bound request state.

An unconfigured surface returns method-not-found. The builder does not publish empty placeholder capabilities, and the official Rust SDK remains a private wire adapter rather than StateKnot's domain model.

Freeze catalogs before traffic

Tool schemas compile offline at startup; unresolved or network $ref values fail the build. Tool, Resource, Template, and Prompt catalogs enforce count and byte ceilings, reject duplicates, sort deterministically, and expose stable digests. Scope-filtered discovery uses principal-bound cursors. Public caching is rejected when any entry is scope-restricted.

Descriptions, annotations, schemas, server instructions, client capabilities, and completion values remain untrusted data. They never grant authority.

Compose one application

Rust · construction outline 
let options = McpServerApplicationOptions::new(
    "inventory-mcp",
    "1.0.0",
    100,
    Duration::from_secs(60),
    McpServerCacheScope::Private,
)?;

let app = McpServerApplicationBuilder::new(options)
    .with_tools(tool_registry, tool_authorization)?
    .with_resources(resource_catalog, resource_reader, resource_authorization)?
    .with_prompts(prompt_catalog, prompt_renderer, prompt_authorization)?
    .with_completion_provider(completion_provider)?
    .build()?;

let service = McpServerHttpService::with_admission_control(
    app,
    http_options,
    McpServerAuthentication::bearer(authenticator, bearer_challenge),
    admission_control,
)?;

Mount the resulting Tower service at one exact Axum or Hyper endpoint. Build registries once at startup; never rebuild them per request. Application authorization must use decoded operations, not Mcp-Method or Mcp-Name transport hints.

Reproduce the evidence

Shell · application and official gates 
cargo test -p stateknot-integrations mcp_server_ --locked
bash conformance/mcp-server/run-2026-07-28.sh

The pinned runner passes all 37 scored Server scenarios: 114 assertions succeed, five capability checks skip, one SSE check is informational, and zero fail or warn. Three pending unscored schema/header gates add 32 successes. The production transport is exercised by the official fixture; StateKnot registries and policies have separate real-HTTP tests. Read the exact claim boundary before publishing compatibility claims.