import type { ServiceTokenRecord } from '../../types/delegation';
/**
 * Generate a new service token for an external MCP server.
 * Returns the raw token once — it is never stored in plaintext.
 */
export declare function generateServiceToken(name: string, serverId: string | null, scopes: string[], expiresAt?: Date): Promise<{
    id: string;
    rawToken: string;
}>;
/**
 * Validate a raw service token. Returns the record if valid, null otherwise.
 */
export declare function validateServiceToken(rawToken: string): Promise<(ServiceTokenRecord & {
    token_hash?: undefined;
}) | null>;
/**
 * Revoke (delete) a service token by ID.
 */
export declare function revokeServiceToken(id: string): Promise<boolean>;
/**
 * List service tokens for an MCP server (without hashes).
 */
export declare function listServiceTokens(serverId: string): Promise<ServiceTokenRecord[]>;