// 1. Inisialisasi Server
const server = new Server({
  name: "my-mcp-server",
  version: "1.0.0"
}, {
  capabilities: { tools: {} }
});

// 2. Daftarkan Tool
server.setRequestHandler(
  ListToolsRequestSchema, 
  async () => ({
    tools: [/* toolDefinitions */]
  })
);

Server: Menentukan identitas dan kemampuan server.

// 3. Handle Eksekusi
server.setRequestHandler(
  CallToolRequestSchema, 
  async (request) => {
    const { name, arguments: args } = request.params;
    return await handleToolCall(name, args);
  }
);

// 4. Connect Transport
const transport = new StdioServerTransport();
await server.connect(transport);

Execution: Menghubungkan request AI ke fungsi asli kita.

// Server merespons 401 jika butuh login
return new NextResponse(JSON.stringify({
  jsonrpc: "2.0",
  error: {
    code: 401,
    message: "Unauthorized",
    data: { 
      login_url: "https://myapp.com/oauth" 
    }
  }
}), { status: 401 });

Flow: AI akan otomatis menampilkan tombol "Login" kepada user saat menerima error 401 ini.

// Verifikasi Token di Server
const authHeader = req.headers.get("authorization");
const userId = await getUserIdFromToken(authHeader);

if (isProtected(toolName) && !userId) {
  return throw401();
}

Security: Memastikan data sensitif (seperti booking) hanya bisa diakses setelah user login.