/**
 * CORS Middleware for MCP Gateway
 *
 * Implements SEC-03: CORS Origin Whitelist
 * - Only allows requests from Claude.ai origins
 * - Echoes back matched origin (not static wildcard)
 * - Rejects requests from unknown origins (403)
 * - Allows localhost in development mode
 */
import type { Request, Response, NextFunction } from "express";
/**
 * CORS middleware factory
 */
export declare function corsMiddleware(req: Request, res: Response, next: NextFunction): void;
//# sourceMappingURL=cors.d.ts.map