/** * Streamable HTTP transport entry point ("Method 2", MCP spec 2026-07-28). * * Serves the same server graph as stdio over HTTP using the SDK v2 node * adapter's `NodeStreamableHTTPServerTransport` in stateless mode. Security: * • DNS-rebinding protection via `Host` header validation. * • Bearer-token auth (env `EMAIL_MCP_HTTP_TOKEN` or `--token`). * • Refuses to bind a non-loopback interface without a token (use * `--insecure` to override, e.g. when TLS + auth is terminated upstream). * * Run: email-mcp http --port 8080 → http://127.0.0.1:8080/mcp * email-mcp http --host 0.0.0.0 --port 8080 --token "$SECRET" */ import type { ServerConfig } from '../types/index.js'; export interface HttpOptions { host: string; port: number; path: string; token?: string; allowedHosts: string[]; insecure: boolean; } /** * Resolve `http` options with the layered precedence: * CLI flags → EMAIL_MCP_HTTP_* env → [settings.server] → built-in defaults. */ export declare function parseOptions(argv: string[], env?: Record, serverConfig?: ServerConfig): HttpOptions; export default function runHttp(argv: string[]): Promise; //# sourceMappingURL=http.d.ts.map