import type { CallToolResult } from '@modelcontextprotocol/server';
export declare const UPSTREAM_AUTH_REQUIRED_META = "com.redocly/upstream-auth-required";
export type UpstreamAuthRequiredEvent = {
    api: string;
    name: string;
    status: number;
    scheme?: string;
    schemes?: string[];
    /** Scheme whose stored credential the bridge actually sent; absent when nothing was injected. */
    sentScheme?: string;
    /** Lower-cased credential header the sandbox code set itself, which suppressed the injection. */
    callerHeader?: string;
    /** The upstream's own explanation of the failure, taken from the response body. */
    detail?: string;
};
export declare function upstreamAuthKey(event: {
    api: string;
    scheme?: string;
}): string;
export declare function withAuthRequiredMeta(result: CallToolResult, events: UpstreamAuthRequiredEvent[]): CallToolResult;
export declare function readAuthRequiredMeta(result: CallToolResult): UpstreamAuthRequiredEvent[];
export declare function stripAuthRequiredMeta(result: CallToolResult): CallToolResult;
//# sourceMappingURL=upstream-auth.d.ts.map