/**
 * MCP Token Store — secure storage for OAuth tokens.
 *
 * Storage strategy:
 *   1. OS keychain via optional `keytar` (if available)
 *   2. Fallback: AES-256-GCM encrypted JSON file in data directory
 *
 * Each server's tokens are stored under a unique key derived from the server URL.
 */
import type { TokenSet } from './oauth';
export interface TokenStore {
    /** Get stored tokens for a server. Returns null if not found. */
    get(serverUrl: string): Promise<TokenSet | null>;
    /** Store tokens for a server. */
    set(serverUrl: string, tokens: TokenSet): Promise<void>;
    /** Remove tokens for a server. */
    remove(serverUrl: string): Promise<void>;
    /** List all server URLs with stored tokens. */
    list(): Promise<string[]>;
    /** Backend name for logging. */
    readonly backend: string;
}
/**
 * Create a TokenStore with the best available backend.
 * Prefers OS keychain (keytar), falls back to encrypted file.
 */
export declare function createTokenStore(dataDir: string): TokenStore;
//# sourceMappingURL=token-store.d.ts.map