MCP服务器连接管理

---
config:
  theme: base
---
flowchart LR
    subgraph L["Local Computer"]
        U["Browser"]
    end

    subgraph MM["MCP Marketplace"]
        M["MCP Tool Server<br>(Cloud Run / GKE)"]
    end

    subgraph R["Remote Server"]
        A["Agent Server<br>(Cloud Run / GKE)"]
        MM
        IS["Internal Services / Database / MQ"]
        IA["Internal APIs"]
    end
    O["Authorization Server"]

    %% Authentication flow
    U -- Login → obtain access token --> O

    %% User calls Agent Server with token
    U -- Request + Access Token<br>(HTTP or WebSocket) --> A

    %% Agent Server calls MCP Tool Server
    A -- Tool call with access token<br>(SSE、Streamable) --> M

    %% MCP Tool Server backend calls
    M -- Service Calls --> IS
    M -- API Calls --> IA

    M@{ shape: procs}

---
config:
  theme: base
---
sequenceDiagram
    participant U as Browser / User
    participant O as Authorization Server
    participant A as Agent Server
    participant M as MCP Tool Server
    participant IS as Internal Services / DB / MQ
    participant IA as Internal APIs

    %% 使用者登入取得 Access Token
    U->>O: Login request
    O-->>U: Access token

    %% 使用者帶 Access Token 請求 Agent Server
    U->>A: Request + Access Token (HTTP / WebSocket)
    A-->>A: Verify access token locally

    %% Agent Server 呼叫 MCP Tool Server
    A->>M: Tool call with access token (SSE / Streamable)
    M-->>M: Verify access token locally

    alt Access token valid and authorized
        M->>IS: Call internal services / DB / MQ
        M->>IA: Call internal APIs
        M-->>A: Tool execution result
    else Access token invalid or unauthorized
        M-->>A: 403 Forbidden / error payload
    end

    %% 回傳結果給使用者
    A-->>U: Response with tool result