[Agent Builder] MCP connector

.github/CODEOWNERS

@@ -930,6 +930,7 @@ x-pack/platform/packages/shared/kbn-key-value-metadata-table @elastic/obs-ux-inf
 x-pack/platform/packages/shared/kbn-kibana-api-cli @elastic/appex-ai-infra
 x-pack/platform/packages/shared/kbn-langchain @elastic/security-generative-ai
 x-pack/platform/packages/shared/kbn-langgraph-checkpoint-saver @elastic/security-generative-ai
+x-pack/platform/packages/shared/kbn-mcp-connector-common @elastic/workchat-eng
 x-pack/platform/packages/shared/kbn-profiler-cli @elastic/obs-knowledge-team
 x-pack/platform/packages/shared/kbn-sample-parser @elastic/streams-program-team
 x-pack/platform/packages/shared/kbn-search-index-documents @elastic/search-kibana

.gitignore

@@ -20,6 +20,7 @@ target
 .jruby
 .idea
 .claude
+claude.md
 .cursor
 .windsurf
 *.iml

package.json

@@ -717,6 +717,7 @@
     "@kbn/maps-ems-plugin": "link:src/platform/plugins/private/maps_ems",
     "@kbn/maps-plugin": "link:x-pack/platform/plugins/shared/maps",
     "@kbn/maps-vector-tile-utils": "link:x-pack/platform/packages/private/maps/vector_tile_utils",
+    "@kbn/mcp-connector-common": "link:x-pack/platform/packages/shared/kbn-mcp-connector-common",
     "@kbn/metrics": "link:src/platform/packages/private/opentelemetry/kbn-metrics",
     "@kbn/metrics-config": "link:src/platform/packages/private/opentelemetry/kbn-metrics-config",
     "@kbn/metrics-data-access-plugin": "link:x-pack/solutions/observability/plugins/metrics_data_access",

tsconfig.base.json

@@ -1382,6 +1382,8 @@
       "@kbn/maps-plugin/*": ["x-pack/platform/plugins/shared/maps/*"],
       "@kbn/maps-vector-tile-utils": ["x-pack/platform/packages/private/maps/vector_tile_utils"],
       "@kbn/maps-vector-tile-utils/*": ["x-pack/platform/packages/private/maps/vector_tile_utils/*"],
+      "@kbn/mcp-connector-common": ["x-pack/platform/packages/shared/kbn-mcp-connector-common"],
+      "@kbn/mcp-connector-common/*": ["x-pack/platform/packages/shared/kbn-mcp-connector-common/*"],
       "@kbn/mcp-dev-server": ["src/platform/packages/shared/kbn-mcp-dev-server"],
       "@kbn/mcp-dev-server/*": ["src/platform/packages/shared/kbn-mcp-dev-server/*"],
       "@kbn/metrics": ["src/platform/packages/private/opentelemetry/kbn-metrics"],

x-pack/platform/packages/shared/kbn-mcp-connector-common/README.md

@@ -0,0 +1,3 @@
+# @kbn/mcp-connector-common
+
+Empty package generated by @kbn/generate

x-pack/platform/packages/shared/kbn-mcp-connector-common/index.ts

@@ -0,0 +1,60 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0; you may not use this file except in compliance with the Elastic License
+ * 2.0.
+ */
+
+export type {
+  MCPConnectorConfig,
+  MCPConnectorHTTPServiceConfig,
+  MCPConnectorAuthType,
+  MCPConnectorSecrets,
+  MCPConnectorSecretsNone,
+  MCPConnectorSecretsBearer,
+  MCPConnectorSecretsApiKey,
+  MCPConnectorSecretsBasic,
+  MCPConnectorSecretsCustomHeaders,
+  MCPConnectorSubActionType,
+  MCPCallToolParams,
+  MCPListToolsParams,
+  MCPExecutorParams,
+} from './src/connector';
+
+export {
+  MCP_CONNECTOR_SUB_ACTION_TYPE_CALL_TOOL,
+  MCP_CONNECTOR_SUB_ACTION_TYPE_LIST_TOOLS,
+} from './src/connector';
+
+export type {
+  CallToolRequest,
+  CallToolResponse,
+  Tool,
+  ToolProviderMetadata,
+  ListToolsResponse,
+  ContentPart,
+  TextPart,
+} from './src/client';
+
+export { MCP_CONNECTOR_TYPE_ID, MCP_CONNECTOR_TITLE } from './src/constants';
+
+export {
+  MCP_NAMESPACE_PREFIX,
+  isMcpToolId,
+  createMcpToolId,
+  parseMcpToolId,
+} from './src/namespaces';
+
+export { createProviderMetadata } from './src/provider_metadata';
+
+export {
+  MCPConnectorConfigSchema,
+  MCPConnectorHTTPServiceConfigSchema,
+  MCPConnectorSecretsSchema,
+  MCPConnectorSecretsNoneSchema,
+  MCPConnectorSecretsBearerSchema,
+  MCPConnectorSecretsApiKeySchema,
+  MCPConnectorSecretsBasicSchema,
+  MCPConnectorSecretsCustomHeadersSchema,
+  MCPExecutorParamsSchema,
+} from './src/schema';

x-pack/platform/packages/shared/kbn-mcp-connector-common/jest.config.js

@@ -0,0 +1,12 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0; you may not use this file except in compliance with the Elastic License
+ * 2.0.
+ */
+
+module.exports = {
+  preset: '@kbn/test/jest_node',
+  rootDir: '../../../../..',
+  roots: ['<rootDir>/x-pack/platform/packages/shared/kbn-mcp-connector-common'],
+};

x-pack/platform/packages/shared/kbn-mcp-connector-common/kibana.jsonc

@@ -0,0 +1,7 @@
+{
+  "type": "shared-common",
+  "id": "@kbn/mcp-connector-common",
+  "owner": "@elastic/workchat-eng",
+  "group": "platform",
+  "visibility": "shared"
+}

x-pack/platform/packages/shared/kbn-mcp-connector-common/package.json

@@ -0,0 +1,6 @@
+{
+  "name": "@kbn/mcp-connector-common",
+  "private": true,
+  "version": "1.0.0",
+  "license": "Elastic License 2.0"
+}

x-pack/platform/packages/shared/kbn-mcp-connector-common/src/client.ts

@@ -0,0 +1,69 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0; you may not use this file except in compliance with the Elastic License
+ * 2.0.
+ */
+
+export interface CallToolRequest {
+  name: string;
+  arguments?: Record<string, any>;
+}
+
+export interface TextPart {
+  type: 'text';
+  text: string;
+}
+
+export type ContentPart = TextPart;
+
+export interface CallToolResponse {
+  content: ContentPart[];
+  /**
+   * Optional provider metadata for attribution and audit trails.
+   * Included in tool execution results for tracking and logging.
+   */
+  provider?: ToolProviderMetadata;
+}
+
+/**
+ * Metadata about the provider of a tool.
+ * Used for attribution, audit trails, and UI display.
+ */
+export interface ToolProviderMetadata {
+  /**
+   * Provider identifier (e.g., 'mcp.github')
+   */
+  id: string;
+  /**
+   * Human-readable provider name (e.g., 'GitHub MCP Server')
+   */
+  name: string;
+  /**
+   * Provider type constant
+   */
+  type: 'mcp';
+  /**
+   * Unique ID of the MCP connector (from config.uniqueId)
+   */
+  uniqueId: string;
+  /**
+   * Optional description of when to use this MCP server (for LLM context)
+   */
+  description?: string;
+}
+
+export interface Tool {
+  name: string;
+  description?: string;
+  inputSchema: Record<string, unknown>;
+  /**
+   * Optional provider metadata for attribution and audit trails.
+   * When present, indicates the source of the tool (e.g., which MCP connector).
+   */
+  provider?: ToolProviderMetadata;
+}
+
+export interface ListToolsResponse {
+  tools: Tool[];
+}

x-pack/platform/packages/shared/kbn-mcp-connector-common/src/connector.ts

@@ -0,0 +1,98 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0; you may not use this file except in compliance with the Elastic License
+ * 2.0.
+ */
+import type { TypeOf } from '@kbn/config-schema';
+import type {
+  MCPConnectorHTTPServiceConfigSchema,
+  MCPConnectorConfigSchema,
+  MCPConnectorSecretsNoneSchema,
+  MCPConnectorSecretsBearerSchema,
+  MCPConnectorSecretsApiKeySchema,
+  MCPConnectorSecretsBasicSchema,
+  MCPConnectorSecretsCustomHeadersSchema,
+  MCPConnectorSecretsSchema,
+} from './schema';
+
+/**
+ * Authentication type selector.
+ *
+ * Determines which authentication method is used. The actual credentials
+ * are stored in the secrets object (encrypted), while this type is stored
+ * in config (not encrypted).
+ */
+export type MCPConnectorAuthType = 'none' | 'bearer' | 'apiKey' | 'basic' | 'customHeaders';
+
+/**
+ * MCP connector HTTP service configuration.
+ * Derived from schema.
+ */
+export type MCPConnectorHTTPServiceConfig = TypeOf<typeof MCPConnectorHTTPServiceConfigSchema>;
+
+/**
+ * MCP connector configuration.
+ * Derived from schema.
+ */
+export type MCPConnectorConfig = TypeOf<typeof MCPConnectorConfigSchema>;
+
+/**
+ * No authentication secrets.
+ * Derived from schema.
+ */
+export type MCPConnectorSecretsNone = TypeOf<typeof MCPConnectorSecretsNoneSchema>;
+
+/**
+ * Bearer token authentication secrets.
+ * Derived from schema.
+ */
+export type MCPConnectorSecretsBearer = TypeOf<typeof MCPConnectorSecretsBearerSchema>;
+
+/**
+ * API key authentication secrets.
+ * Derived from schema.
+ */
+export type MCPConnectorSecretsApiKey = TypeOf<typeof MCPConnectorSecretsApiKeySchema>;
+
+/**
+ * Basic authentication secrets.
+ * Derived from schema.
+ */
+export type MCPConnectorSecretsBasic = TypeOf<typeof MCPConnectorSecretsBasicSchema>;
+
+/**
+ * Custom headers authentication secrets.
+ * Derived from schema.
+ */
+export type MCPConnectorSecretsCustomHeaders = TypeOf<
+  typeof MCPConnectorSecretsCustomHeadersSchema
+>;
+
+/**
+ * MCP connector secrets (discriminated union).
+ * Derived from schema.
+ */
+export type MCPConnectorSecrets = TypeOf<typeof MCPConnectorSecretsSchema>;
+
+export const MCP_CONNECTOR_SUB_ACTION_TYPE_LIST_TOOLS = 'listTools';
+export const MCP_CONNECTOR_SUB_ACTION_TYPE_CALL_TOOL = 'callTool';
+
+export type MCPConnectorSubActionType =
+  | typeof MCP_CONNECTOR_SUB_ACTION_TYPE_LIST_TOOLS
+  | typeof MCP_CONNECTOR_SUB_ACTION_TYPE_CALL_TOOL;
+
+export interface MCPListToolsParams {
+  subAction: typeof MCP_CONNECTOR_SUB_ACTION_TYPE_LIST_TOOLS;
+  subActionParams: {};
+}
+
+export interface MCPCallToolParams {
+  subAction: typeof MCP_CONNECTOR_SUB_ACTION_TYPE_CALL_TOOL;
+  subActionParams: {
+    name: string;
+    arguments?: Record<string, any>;
+  };
+}
+
+export type MCPExecutorParams = MCPListToolsParams | MCPCallToolParams;

x-pack/platform/packages/shared/kbn-mcp-connector-common/src/constants.ts

@@ -0,0 +1,17 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0; you may not use this file except in compliance with the Elastic License
+ * 2.0.
+ */
+
+import { i18n } from '@kbn/i18n';
+
+export const MCP_CONNECTOR_TITLE = i18n.translate(
+  'xpack.stackConnectors.components.mcp.connectorTypeTitle',
+  {
+    defaultMessage: 'MCP Connector',
+  }
+);
+
+export const MCP_CONNECTOR_TYPE_ID = '.mcp';