{
  "schema_version": "2025-03-26",
  "name": "AetherShield MCP Server",
  "description": "Model Context Protocol server for AetherShield quantum-resistant VPN platform. Provides privacy analysis, speed testing, and server management tools.",
  "url": "https://aethershield.io",
  "provider": {
    "name": "AetherShield",
    "url": "https://aethershield.io"
  },
  "transport": {
    "type": "streamable-http",
    "url": "https://ztrytuqzwbexixmlwmml.supabase.co/functions/v1/mcp-server"
  },
  "authentication": {
    "type": "optional-bearer",
    "note": "Most tools (analyze_privacy, speed_test, list_servers, server_health) are public and require no auth. user_privacy_config and analyze_my_privacy require the user's Supabase access token in the Authorization: Bearer <jwt> header — users can copy theirs from the AetherShield Account page.",
    "tokenSource": "https://aethershield.io/app/account"
  },
  "tools": [
    {
      "name": "analyze_privacy",
      "description": "Analyze VPN privacy posture and return scored assessment with threats and recommendations",
      "inputSchema": {
        "type": "object",
        "properties": {
          "protocol": { "type": "string", "description": "VPN protocol (AmneziaWG, WireGuard, OpenVPN, Stealth)" },
          "pqEnabled": { "type": "boolean", "description": "Post-quantum encryption enabled" },
          "killSwitch": { "type": "boolean", "description": "Kill switch enabled" },
          "hops": { "type": "integer", "description": "Number of multi-hop nodes" },
          "server": { "type": "string", "description": "Connected server name" }
        }
      }
    },
    {
      "name": "speed_test",
      "description": "Run VPN speed test (ping, download, or upload)",
      "inputSchema": {
        "type": "object",
        "properties": {
          "type": { "type": "string", "enum": ["ping", "download", "upload"] },
          "size": { "type": "integer", "description": "Download chunk size in bytes" }
        },
        "required": ["type"]
      }
    },
    {
      "name": "list_servers",
      "description": "List all available VPN servers with location, load, and protocols"
    },
    {
      "name": "server_health",
      "description": "Get real-time health and performance metrics for VPN servers"
    },
    {
      "name": "user_privacy_config",
      "description": "Read the authenticated user's actual VPN configuration (protocol, kill switch, multi-hop bonding, leak protections, ultra-anonymous mode). Requires the user's Supabase JWT in the Authorization: Bearer <token> header.",
      "authentication": "required",
      "inputSchema": {
        "type": "object",
        "properties": {}
      }
    },
    {
      "name": "analyze_my_privacy",
      "description": "One-shot convenience tool: reads the authenticated user's actual VPN configuration AND scores it in a single round-trip. Equivalent to calling user_privacy_config followed by analyze_privacy with derived parameters. Returns the user's settings, the derived analyze_privacy inputs, and a 0–100 privacy score with threats and recommendations. Requires the user's Supabase JWT in the Authorization: Bearer <token> header.",
      "authentication": "required",
      "inputSchema": {
        "type": "object",
        "properties": {
          "server": { "type": "string", "description": "Optional connected server name to factor into the analysis" },
          "hopsOverride": { "type": "integer", "description": "Optional explicit hop count (1–4). Defaults to 2 if multipath bonding is on, else 1." }
        }
      }
    }
  ],
  "resources": [
    {
      "name": "privacy_config",
      "description": "Current user VPN privacy configuration",
      "uri": "aethershield://config/privacy",
      "mimeType": "application/json"
    }
  ]
}