/**
 * EVO-12 hosted MCP server — wraps the EXISTING in-process h2a tool dispatch
 * (`McpServer.callTool`) behind an SDK `Server`, exposing ONLY the read-only
 * allowlist. `dispatchHostedTool` refuses any non-allowlisted tool name
 * (defense-in-depth: a signing/private-key tool is never reachable here, even
 * if the wire asked for it).
 */
import { Server } from "@modelcontextprotocol/sdk/server/index.js";
import { type CallToolResult } from "@modelcontextprotocol/sdk/types.js";
import { type McpServer } from "../mcp/server.js";
export declare function dispatchHostedTool(h2a: McpServer, name: string, args: Record<string, unknown> | undefined): CallToolResult;
/** SDK Server exposing only the read-only allowlist, dispatching to the h2a callTool. */
export declare function buildHostedMcpServer(h2a: McpServer): Server;
//# sourceMappingURL=hosted-mcp-server.d.ts.map