diff --git a/package-lock.json b/package-lock.json
index d8829d3..eddf561 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1093,6 +1093,68 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/@modelcontextprotocol/sdk": {
+      "version": "1.27.1",
+      "resolved": "https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.27.1.tgz",
+      "integrity": "sha512-sr6GbP+4edBwFndLbM60gf07z0FQ79gaExpnsjMGePXqFcSSb7t6iscpjk9DhFhwd+mTEQrzNafGP8/iGGFYaA==",
+      "license": "MIT",
+      "dependencies": {
+        "@hono/node-server": "^1.19.9",
+        "ajv": "^8.17.1",
+        "ajv-formats": "^3.0.1",
+        "content-type": "^1.0.5",
+        "cors": "^2.8.5",
+        "cross-spawn": "^7.0.5",
+        "eventsource": "^3.0.2",
+        "eventsource-parser": "^3.0.0",
+        "express": "^5.2.1",
+        "express-rate-limit": "^8.2.1",
+        "hono": "^4.11.4",
+        "jose": "^6.1.3",
+        "json-schema-typed": "^8.0.2",
+        "pkce-challenge": "^5.0.0",
+        "raw-body": "^3.0.0",
+        "zod": "^3.25 || ^4.0",
+        "zod-to-json-schema": "^3.25.1"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "peerDependencies": {
+        "@cfworker/json-schema": "^4.1.1",
+        "zod": "^3.25 || ^4.0"
+      },
+      "peerDependenciesMeta": {
+        "@cfworker/json-schema": {
+          "optional": true
+        },
+        "zod": {
+          "optional": false
+        }
+      }
+    },
+    "node_modules/@modelcontextprotocol/sdk/node_modules/ajv": {
+      "version": "8.18.0",
+      "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.18.0.tgz",
+      "integrity": "sha512-PlXPeEWMXMZ7sPYOHqmDyCJzcfNrUr3fGNKtezX14ykXOEIvyK81d+qydx89KY5O71FKMPaQ2vBfBFI5NHR63A==",
+      "license": "MIT",
+      "dependencies": {
+        "fast-deep-equal": "^3.1.3",
+        "fast-uri": "^3.0.1",
+        "json-schema-traverse": "^1.0.0",
+        "require-from-string": "^2.0.2"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/epoberezkin"
+      }
+    },
+    "node_modules/@modelcontextprotocol/sdk/node_modules/json-schema-traverse": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz",
+      "integrity": "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==",
+      "license": "MIT"
+    },
     "node_modules/@noble/ciphers": {
       "version": "1.3.0",
       "resolved": "https://registry.npmjs.org/@noble/ciphers/-/ciphers-1.3.0.tgz",
@@ -1296,6 +1358,10 @@
       "resolved": "packages/core",
       "link": true
     },
+    "node_modules/@opendatalabs/personal-server-ts-mcp": {
+      "resolved": "packages/mcp",
+      "link": true
+    },
     "node_modules/@opendatalabs/personal-server-ts-server": {
       "resolved": "packages/server",
       "link": true
@@ -2628,6 +2694,19 @@
         }
       }
     },
+    "node_modules/accepts": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/accepts/-/accepts-2.0.0.tgz",
+      "integrity": "sha512-5cvg6CtKwfgdmVqY1WIiXKc3Q1bkRqGLi+2W/6ao+6Y7gu/RCwRuAhGEzh5B4KlszSuTLgZYuqFqo5bImjNKng==",
+      "license": "MIT",
+      "dependencies": {
+        "mime-types": "^3.0.0",
+        "negotiator": "^1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
     "node_modules/acorn": {
       "version": "8.15.0",
       "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.15.0.tgz",
@@ -2692,6 +2771,45 @@
         "url": "https://github.com/sponsors/epoberezkin"
       }
     },
+    "node_modules/ajv-formats": {
+      "version": "3.0.1",
+      "resolved": "https://registry.npmjs.org/ajv-formats/-/ajv-formats-3.0.1.tgz",
+      "integrity": "sha512-8iUql50EUR+uUcdRQ3HDqa6EVyo3docL8g5WJ3FNcWmu62IbkGUue/pEyLBW8VGKKucTPgqeks4fIU1DA4yowQ==",
+      "license": "MIT",
+      "dependencies": {
+        "ajv": "^8.0.0"
+      },
+      "peerDependencies": {
+        "ajv": "^8.0.0"
+      },
+      "peerDependenciesMeta": {
+        "ajv": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/ajv-formats/node_modules/ajv": {
+      "version": "8.18.0",
+      "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.18.0.tgz",
+      "integrity": "sha512-PlXPeEWMXMZ7sPYOHqmDyCJzcfNrUr3fGNKtezX14ykXOEIvyK81d+qydx89KY5O71FKMPaQ2vBfBFI5NHR63A==",
+      "license": "MIT",
+      "dependencies": {
+        "fast-deep-equal": "^3.1.3",
+        "fast-uri": "^3.0.1",
+        "json-schema-traverse": "^1.0.0",
+        "require-from-string": "^2.0.2"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/epoberezkin"
+      }
+    },
+    "node_modules/ajv-formats/node_modules/json-schema-traverse": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz",
+      "integrity": "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==",
+      "license": "MIT"
+    },
     "node_modules/ansi-escapes": {
       "version": "7.2.0",
       "resolved": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-7.2.0.tgz",
@@ -2852,6 +2970,30 @@
         "readable-stream": "^3.4.0"
       }
     },
+    "node_modules/body-parser": {
+      "version": "2.2.2",
+      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-2.2.2.tgz",
+      "integrity": "sha512-oP5VkATKlNwcgvxi0vM0p/D3n2C3EReYVX+DNYs5TjZFn/oQt2j+4sVJtSMr18pdRr8wjTcBl6LoV+FUwzPmNA==",
+      "license": "MIT",
+      "dependencies": {
+        "bytes": "^3.1.2",
+        "content-type": "^1.0.5",
+        "debug": "^4.4.3",
+        "http-errors": "^2.0.0",
+        "iconv-lite": "^0.7.0",
+        "on-finished": "^2.4.1",
+        "qs": "^6.14.1",
+        "raw-body": "^3.0.1",
+        "type-is": "^2.0.1"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
     "node_modules/bottleneck": {
       "version": "2.19.5",
       "resolved": "https://registry.npmjs.org/bottleneck/-/bottleneck-2.19.5.tgz",
@@ -2907,6 +3049,44 @@
         "ieee754": "^1.1.13"
       }
     },
+    "node_modules/bytes": {
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz",
+      "integrity": "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/call-bind-apply-helpers": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
+      "integrity": "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "function-bind": "^1.1.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/call-bound": {
+      "version": "1.0.4",
+      "resolved": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz",
+      "integrity": "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bind-apply-helpers": "^1.0.2",
+        "get-intrinsic": "^1.3.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
     "node_modules/callsites": {
       "version": "3.1.0",
       "resolved": "https://registry.npmjs.org/callsites/-/callsites-3.1.0.tgz",
@@ -3342,6 +3522,28 @@
         "proto-list": "~1.2.1"
       }
     },
+    "node_modules/content-disposition": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-1.0.1.tgz",
+      "integrity": "sha512-oIXISMynqSqm241k6kcQ5UwttDILMK4BiurCfGEREw6+X9jkkpEe5T9FZaApyLGGOnFuyMWZpdolTXMtvEJ08Q==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/content-type": {
+      "version": "1.0.5",
+      "resolved": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz",
+      "integrity": "sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
     "node_modules/conventional-changelog-angular": {
       "version": "8.1.0",
       "resolved": "https://registry.npmjs.org/conventional-changelog-angular/-/conventional-changelog-angular-8.1.0.tgz",
@@ -3426,6 +3628,24 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/cookie": {
+      "version": "0.7.2",
+      "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz",
+      "integrity": "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/cookie-signature": {
+      "version": "1.2.2",
+      "resolved": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.2.2.tgz",
+      "integrity": "sha512-D76uU73ulSXrD1UXF4KE2TMxVVwhsnCgfAyTg9k8P6KGZjlXKrOLe4dJQKI3Bxi5wjesZoFXJWElNWBjPZMbhg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.6.0"
+      }
+    },
     "node_modules/core-util-is": {
       "version": "1.0.3",
       "resolved": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz",
@@ -3433,6 +3653,23 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/cors": {
+      "version": "2.8.6",
+      "resolved": "https://registry.npmjs.org/cors/-/cors-2.8.6.tgz",
+      "integrity": "sha512-tJtZBBHA6vjIAaF6EnIaq6laBBP9aq/Y3ouVJjEfoHbRBcHBAHYcMh/w8LDrk2PvIMMq8gmopa5D4V8RmbrxGw==",
+      "license": "MIT",
+      "dependencies": {
+        "object-assign": "^4",
+        "vary": "^1"
+      },
+      "engines": {
+        "node": ">= 0.10"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
     "node_modules/cosmiconfig": {
       "version": "9.0.0",
       "resolved": "https://registry.npmjs.org/cosmiconfig/-/cosmiconfig-9.0.0.tgz",
@@ -3482,7 +3719,6 @@
       "version": "7.0.6",
       "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
       "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==",
-      "dev": true,
       "license": "MIT",
       "dependencies": {
         "path-key": "^3.1.0",
@@ -3548,7 +3784,6 @@
       "version": "4.4.3",
       "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
       "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
-      "dev": true,
       "license": "MIT",
       "dependencies": {
         "ms": "^2.1.3"
@@ -3593,6 +3828,15 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/depd": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz",
+      "integrity": "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
     "node_modules/detect-libc": {
       "version": "2.1.2",
       "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz",
@@ -3628,6 +3872,20 @@
         "node": ">=8"
       }
     },
+    "node_modules/dunder-proto": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
+      "integrity": "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bind-apply-helpers": "^1.0.1",
+        "es-errors": "^1.3.0",
+        "gopd": "^1.2.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
     "node_modules/duplexer2": {
       "version": "0.1.4",
       "resolved": "https://registry.npmjs.org/duplexer2/-/duplexer2-0.1.4.tgz",
@@ -3671,6 +3929,12 @@
         "safe-buffer": "~5.1.0"
       }
     },
+    "node_modules/ee-first": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz",
+      "integrity": "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==",
+      "license": "MIT"
+    },
     "node_modules/emoji-regex": {
       "version": "8.0.0",
       "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz",
@@ -3685,6 +3949,15 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/encodeurl": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz",
+      "integrity": "sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
     "node_modules/end-of-stream": {
       "version": "1.4.5",
       "resolved": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.5.tgz",
@@ -3859,6 +4132,24 @@
         "is-arrayish": "^0.2.1"
       }
     },
+    "node_modules/es-define-property": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz",
+      "integrity": "sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/es-errors": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz",
+      "integrity": "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
     "node_modules/es-module-lexer": {
       "version": "1.7.0",
       "resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-1.7.0.tgz",
@@ -3866,6 +4157,18 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/es-object-atoms": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.1.tgz",
+      "integrity": "sha512-FGgH2h8zKNim9ljj7dankFPcICIK9Cp5bm+c2gQSYePhpaG5+esrLODihIorn+Pe6FGJzWhXQotPv73jTaldXA==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
     "node_modules/esbuild": {
       "version": "0.27.2",
       "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.27.2.tgz",
@@ -3918,6 +4221,12 @@
         "node": ">=6"
       }
     },
+    "node_modules/escape-html": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz",
+      "integrity": "sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow==",
+      "license": "MIT"
+    },
     "node_modules/escape-string-regexp": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",
@@ -4111,12 +4420,42 @@
         "node": ">=0.10.0"
       }
     },
+    "node_modules/etag": {
+      "version": "1.8.1",
+      "resolved": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz",
+      "integrity": "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
     "node_modules/eventemitter3": {
       "version": "5.0.1",
       "resolved": "https://registry.npmjs.org/eventemitter3/-/eventemitter3-5.0.1.tgz",
       "integrity": "sha512-GWkBvjiSZK87ELrYOSESUYeVIc9mvLLf/nXalMOS5dYrgZq9o5OVkbZAVM06CVxYsCwH9BDZFPlQTlPA1j4ahA==",
       "license": "MIT"
     },
+    "node_modules/eventsource": {
+      "version": "3.0.7",
+      "resolved": "https://registry.npmjs.org/eventsource/-/eventsource-3.0.7.tgz",
+      "integrity": "sha512-CRT1WTyuQoD771GW56XEZFQ/ZoSfWid1alKGDYMmkt2yl8UXrVR4pspqWNEcqKvVIzg6PAltWjxcSSPrboA4iA==",
+      "license": "MIT",
+      "dependencies": {
+        "eventsource-parser": "^3.0.1"
+      },
+      "engines": {
+        "node": ">=18.0.0"
+      }
+    },
+    "node_modules/eventsource-parser": {
+      "version": "3.0.6",
+      "resolved": "https://registry.npmjs.org/eventsource-parser/-/eventsource-parser-3.0.6.tgz",
+      "integrity": "sha512-Vo1ab+QXPzZ4tCa8SwIHJFaSzy4R6SHf7BY79rFBDf0idraZWAkYrDjDj8uWaSm3S2TK+hJ7/t1CEmZ7jXw+pg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18.0.0"
+      }
+    },
     "node_modules/execa": {
       "version": "5.1.1",
       "resolved": "https://registry.npmjs.org/execa/-/execa-5.1.1.tgz",
@@ -4206,6 +4545,67 @@
         "node": ">=12.0.0"
       }
     },
+    "node_modules/express": {
+      "version": "5.2.1",
+      "resolved": "https://registry.npmjs.org/express/-/express-5.2.1.tgz",
+      "integrity": "sha512-hIS4idWWai69NezIdRt2xFVofaF4j+6INOpJlVOLDO8zXGpUVEVzIYk12UUi2JzjEzWL3IOAxcTubgz9Po0yXw==",
+      "license": "MIT",
+      "dependencies": {
+        "accepts": "^2.0.0",
+        "body-parser": "^2.2.1",
+        "content-disposition": "^1.0.0",
+        "content-type": "^1.0.5",
+        "cookie": "^0.7.1",
+        "cookie-signature": "^1.2.1",
+        "debug": "^4.4.0",
+        "depd": "^2.0.0",
+        "encodeurl": "^2.0.0",
+        "escape-html": "^1.0.3",
+        "etag": "^1.8.1",
+        "finalhandler": "^2.1.0",
+        "fresh": "^2.0.0",
+        "http-errors": "^2.0.0",
+        "merge-descriptors": "^2.0.0",
+        "mime-types": "^3.0.0",
+        "on-finished": "^2.4.1",
+        "once": "^1.4.0",
+        "parseurl": "^1.3.3",
+        "proxy-addr": "^2.0.7",
+        "qs": "^6.14.0",
+        "range-parser": "^1.2.1",
+        "router": "^2.2.0",
+        "send": "^1.1.0",
+        "serve-static": "^2.2.0",
+        "statuses": "^2.0.1",
+        "type-is": "^2.0.1",
+        "vary": "^1.1.2"
+      },
+      "engines": {
+        "node": ">= 18"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/express-rate-limit": {
+      "version": "8.2.1",
+      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.2.1.tgz",
+      "integrity": "sha512-PCZEIEIxqwhzw4KF0n7QF4QqruVTcF73O5kFKUnGOyjbCCgizBBiFaYpd/fnBLUMPw/BWw9OsiN7GgrNYr7j6g==",
+      "license": "MIT",
+      "dependencies": {
+        "ip-address": "10.0.1"
+      },
+      "engines": {
+        "node": ">= 16"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/express-rate-limit"
+      },
+      "peerDependencies": {
+        "express": ">= 4.11"
+      }
+    },
     "node_modules/fast-content-type-parse": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/fast-content-type-parse/-/fast-content-type-parse-3.0.0.tgz",
@@ -4233,7 +4633,6 @@
       "version": "3.1.3",
       "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
       "integrity": "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==",
-      "dev": true,
       "license": "MIT"
     },
     "node_modules/fast-json-stable-stringify": {
@@ -4260,7 +4659,6 @@
       "version": "3.1.0",
       "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.0.tgz",
       "integrity": "sha512-iPeeDKJSWf4IEOasVVrknXpaBV0IApz/gp7S2bb7Z4Lljbl2MGJRqInZiUrQwV16cpzw/D3S5j5Julj/gT52AA==",
-      "dev": true,
       "funding": [
         {
           "type": "github",
@@ -4339,6 +4737,27 @@
         "node": ">=8"
       }
     },
+    "node_modules/finalhandler": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/finalhandler/-/finalhandler-2.1.1.tgz",
+      "integrity": "sha512-S8KoZgRZN+a5rNwqTxlZZePjT/4cnm0ROV70LedRHZ0p8u9fRID0hJUZQpkKLzro8LfmC8sx23bY6tVNxv8pQA==",
+      "license": "MIT",
+      "dependencies": {
+        "debug": "^4.4.0",
+        "encodeurl": "^2.0.0",
+        "escape-html": "^1.0.3",
+        "on-finished": "^2.4.1",
+        "parseurl": "^1.3.3",
+        "statuses": "^2.0.1"
+      },
+      "engines": {
+        "node": ">= 18.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
     "node_modules/find-up": {
       "version": "5.0.0",
       "resolved": "https://registry.npmjs.org/find-up/-/find-up-5.0.0.tgz",
@@ -4407,6 +4826,24 @@
       "dev": true,
       "license": "ISC"
     },
+    "node_modules/forwarded": {
+      "version": "0.2.0",
+      "resolved": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz",
+      "integrity": "sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/fresh": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/fresh/-/fresh-2.0.0.tgz",
+      "integrity": "sha512-Rx/WycZ60HOaqLKAi6cHRKKI7zxWbJ31MhntmtwMoaTeF7XFH9hhBp8vITaMidfljRQ6eYWCKkaTK+ykVJHP2A==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
     "node_modules/from2": {
       "version": "2.3.0",
       "resolved": "https://registry.npmjs.org/from2/-/from2-2.3.0.tgz",
@@ -4487,6 +4924,15 @@
         "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
       }
     },
+    "node_modules/function-bind": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz",
+      "integrity": "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==",
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
     "node_modules/function-timeout": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/function-timeout/-/function-timeout-1.0.2.tgz",
@@ -4523,6 +4969,43 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/get-intrinsic": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz",
+      "integrity": "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bind-apply-helpers": "^1.0.2",
+        "es-define-property": "^1.0.1",
+        "es-errors": "^1.3.0",
+        "es-object-atoms": "^1.1.1",
+        "function-bind": "^1.1.2",
+        "get-proto": "^1.0.1",
+        "gopd": "^1.2.0",
+        "has-symbols": "^1.1.0",
+        "hasown": "^2.0.2",
+        "math-intrinsics": "^1.1.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/get-proto": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz",
+      "integrity": "sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==",
+      "license": "MIT",
+      "dependencies": {
+        "dunder-proto": "^1.0.1",
+        "es-object-atoms": "^1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
     "node_modules/get-stream": {
       "version": "7.0.1",
       "resolved": "https://registry.npmjs.org/get-stream/-/get-stream-7.0.1.tgz",
@@ -4663,6 +5146,18 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/gopd": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
+      "integrity": "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
     "node_modules/graceful-fs": {
       "version": "4.2.11",
       "resolved": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz",
@@ -4702,6 +5197,30 @@
         "node": ">=8"
       }
     },
+    "node_modules/has-symbols": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz",
+      "integrity": "sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/hasown": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz",
+      "integrity": "sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==",
+      "license": "MIT",
+      "dependencies": {
+        "function-bind": "^1.1.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
     "node_modules/help-me": {
       "version": "5.0.0",
       "resolved": "https://registry.npmjs.org/help-me/-/help-me-5.0.0.tgz",
@@ -4753,6 +5272,26 @@
         "node": "^20.17.0 || >=22.9.0"
       }
     },
+    "node_modules/http-errors": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz",
+      "integrity": "sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==",
+      "license": "MIT",
+      "dependencies": {
+        "depd": "~2.0.0",
+        "inherits": "~2.0.4",
+        "setprototypeof": "~1.2.0",
+        "statuses": "~2.0.2",
+        "toidentifier": "~1.0.1"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
     "node_modules/http-proxy-agent": {
       "version": "7.0.2",
       "resolved": "https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-7.0.2.tgz",
@@ -4797,14 +5336,30 @@
       "integrity": "sha512-5gs5ytaNjBrh5Ow3zrvdUUY+0VxIuWVL4i9irt6friV+BqdCfmV11CQTWMiBYWHbXhco+J1kHfTOUkePhCDvMA==",
       "dev": true,
       "license": "MIT",
-      "bin": {
-        "husky": "bin.js"
+      "bin": {
+        "husky": "bin.js"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/typicode"
+      }
+    },
+    "node_modules/iconv-lite": {
+      "version": "0.7.2",
+      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.7.2.tgz",
+      "integrity": "sha512-im9DjEDQ55s9fL4EYzOAv0yMqmMBSZp6G0VvFyTMPKWxiSBHUj9NW/qqLmXUwXrrM7AvqSlTCfvqRb0cM8yYqw==",
+      "license": "MIT",
+      "dependencies": {
+        "safer-buffer": ">= 2.1.2 < 3.0.0"
       },
       "engines": {
-        "node": ">=18"
+        "node": ">=0.10.0"
       },
       "funding": {
-        "url": "https://github.com/sponsors/typicode"
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
       }
     },
     "node_modules/ieee754": {
@@ -4941,6 +5496,24 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/ip-address": {
+      "version": "10.0.1",
+      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.0.1.tgz",
+      "integrity": "sha512-NWv9YLW4PoW2B7xtzaS3NCot75m6nK7Icdv0o3lfMceJVRfSoQwqD4wEH5rLwoKJwUiZ/rfpiVBhnaF0FK4HoA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 12"
+      }
+    },
+    "node_modules/ipaddr.js": {
+      "version": "1.9.1",
+      "resolved": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz",
+      "integrity": "sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.10"
+      }
+    },
     "node_modules/is-arrayish": {
       "version": "0.2.1",
       "resolved": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz",
@@ -5020,6 +5593,12 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/is-promise": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/is-promise/-/is-promise-4.0.0.tgz",
+      "integrity": "sha512-hvpoI6korhJMnej285dSg6nu1+e6uxs7zG3BYAm5byqDsgJNWwxzM6z6iZiAgQR4TJ30JmBTOwqZUw3WlyH3AQ==",
+      "license": "MIT"
+    },
     "node_modules/is-stream": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/is-stream/-/is-stream-2.0.1.tgz",
@@ -5057,7 +5636,6 @@
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz",
       "integrity": "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==",
-      "dev": true,
       "license": "ISC"
     },
     "node_modules/isows": {
@@ -5112,6 +5690,15 @@
         "jiti": "lib/jiti-cli.mjs"
       }
     },
+    "node_modules/jose": {
+      "version": "6.1.3",
+      "resolved": "https://registry.npmjs.org/jose/-/jose-6.1.3.tgz",
+      "integrity": "sha512-0TpaTfihd4QMNwrz/ob2Bp7X04yuxJkjRGi4aKmOqwhov54i6u79oCv7T+C7lo70MKH6BesI3vscD1yb/yzKXQ==",
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/panva"
+      }
+    },
     "node_modules/joycon": {
       "version": "3.1.1",
       "resolved": "https://registry.npmjs.org/joycon/-/joycon-3.1.1.tgz",
@@ -5162,6 +5749,12 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/json-schema-typed": {
+      "version": "8.0.2",
+      "resolved": "https://registry.npmjs.org/json-schema-typed/-/json-schema-typed-8.0.2.tgz",
+      "integrity": "sha512-fQhoXdcvc3V28x7C7BMs4P5+kNlgUURe2jmUT1T//oBRMDrqy1QPelJimwZGo7Hg9VPV3EQV5Bnq4hbFy2vetA==",
+      "license": "BSD-2-Clause"
+    },
     "node_modules/json-stable-stringify-without-jsonify": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/json-stable-stringify-without-jsonify/-/json-stable-stringify-without-jsonify-1.0.1.tgz",
@@ -5506,6 +6099,24 @@
         "url": "https://github.com/chalk/chalk?sponsor=1"
       }
     },
+    "node_modules/math-intrinsics": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",
+      "integrity": "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/media-typer": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/media-typer/-/media-typer-1.1.0.tgz",
+      "integrity": "sha512-aisnrDP4GNe06UcKFnV5bfMNPBUw4jsLGaWwWfnH3v02GnBuXX2MCVn5RbrWo0j3pczUilYblq7fQ7Nw2t5XKw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
     "node_modules/meow": {
       "version": "13.2.0",
       "resolved": "https://registry.npmjs.org/meow/-/meow-13.2.0.tgz",
@@ -5519,6 +6130,18 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/merge-descriptors": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-2.0.0.tgz",
+      "integrity": "sha512-Snk314V5ayFLhp3fkUREub6WtjBfPdCPY1Ln8/8munuLuiYhsABgBVWsozAG+MWMbVEvcdcpbi9R7ww22l9Q3g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/merge-stream": {
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/merge-stream/-/merge-stream-2.0.0.tgz",
@@ -5569,6 +6192,31 @@
         "node": ">=16"
       }
     },
+    "node_modules/mime-db": {
+      "version": "1.54.0",
+      "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.54.0.tgz",
+      "integrity": "sha512-aU5EJuIN2WDemCcAp2vFBfp/m4EAhWJnUNSSw0ixs7/kXbd6Pg64EmwJkNdFhB8aWt1sH2CTXrLxo/iAGV3oPQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/mime-types": {
+      "version": "3.0.2",
+      "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-3.0.2.tgz",
+      "integrity": "sha512-Lbgzdk0h4juoQ9fCKXW4by0UJqj+nOOrI9MJ1sSj4nI8aI2eo1qmvQEie4VD1glsS250n15LsWsYtCugiStS5A==",
+      "license": "MIT",
+      "dependencies": {
+        "mime-db": "^1.54.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
     "node_modules/mimic-fn": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-4.0.0.tgz",
@@ -5639,7 +6287,6 @@
       "version": "2.1.3",
       "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
       "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
-      "dev": true,
       "license": "MIT"
     },
     "node_modules/mz": {
@@ -5699,6 +6346,15 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/negotiator": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/negotiator/-/negotiator-1.0.0.tgz",
+      "integrity": "sha512-8Ofs/AUQh8MaEcrlq5xOX0CQ9ypTF5dl78mjlMNfOK08fzpgTHQRQPBxcPlEtIw0yRpws+Zo/3r+5WRby7u3Gg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
     "node_modules/neo-async": {
       "version": "2.6.2",
       "resolved": "https://registry.npmjs.org/neo-async/-/neo-async-2.6.2.tgz",
@@ -7888,12 +8544,23 @@
       "version": "4.1.1",
       "resolved": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz",
       "integrity": "sha512-rJgTQnkUnH1sFw8yT6VSU3zD3sWmu6sZhIseY8VX+GRu3P6F7Fu+JNDoXfklElbLJSnc3FUQHVe4cU5hj+BcUg==",
-      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=0.10.0"
       }
     },
+    "node_modules/object-inspect": {
+      "version": "1.13.4",
+      "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
+      "integrity": "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
     "node_modules/obug": {
       "version": "2.1.1",
       "resolved": "https://registry.npmjs.org/obug/-/obug-2.1.1.tgz",
@@ -7914,6 +8581,18 @@
         "node": ">=14.0.0"
       }
     },
+    "node_modules/on-finished": {
+      "version": "2.4.1",
+      "resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz",
+      "integrity": "sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==",
+      "license": "MIT",
+      "dependencies": {
+        "ee-first": "1.1.1"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
     "node_modules/once": {
       "version": "1.4.0",
       "resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz",
@@ -8198,6 +8877,15 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/parseurl": {
+      "version": "1.3.3",
+      "resolved": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz",
+      "integrity": "sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
     "node_modules/path-exists": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz",
@@ -8212,12 +8900,21 @@
       "version": "3.1.1",
       "resolved": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz",
       "integrity": "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==",
-      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=8"
       }
     },
+    "node_modules/path-to-regexp": {
+      "version": "8.3.0",
+      "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-8.3.0.tgz",
+      "integrity": "sha512-7jdwVIRtsP8MYpdXSwOS0YdD0Du+qOoF/AEPIt88PcCFrZCzx41oxku1jD88hZBwbNUIEfpqvuhjFaMAqMTWnA==",
+      "license": "MIT",
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
     "node_modules/path-type": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/path-type/-/path-type-4.0.0.tgz",
@@ -8339,6 +9036,15 @@
       "integrity": "sha512-BndPH67/JxGExRgiX1dX0w1FvZck5Wa4aal9198SrRhZjH3GxKQUKIBnYJTdj2HDN3UQAS06HlfcSbQj2OHmaw==",
       "license": "MIT"
     },
+    "node_modules/pkce-challenge": {
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/pkce-challenge/-/pkce-challenge-5.0.1.tgz",
+      "integrity": "sha512-wQ0b/W4Fr01qtpHlqSqspcj3EhBvimsdh0KlHhH8HRZnMsEa0ea2fTULOXOS9ccQr3om+GcGRk4e+isrZWV8qQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=16.20.0"
+      }
+    },
     "node_modules/pkg-conf": {
       "version": "2.1.0",
       "resolved": "https://registry.npmjs.org/pkg-conf/-/pkg-conf-2.1.0.tgz",
@@ -8543,6 +9249,19 @@
       "dev": true,
       "license": "ISC"
     },
+    "node_modules/proxy-addr": {
+      "version": "2.0.7",
+      "resolved": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz",
+      "integrity": "sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==",
+      "license": "MIT",
+      "dependencies": {
+        "forwarded": "0.2.0",
+        "ipaddr.js": "1.9.1"
+      },
+      "engines": {
+        "node": ">= 0.10"
+      }
+    },
     "node_modules/pump": {
       "version": "3.0.3",
       "resolved": "https://registry.npmjs.org/pump/-/pump-3.0.3.tgz",
@@ -8563,12 +9282,51 @@
         "node": ">=6"
       }
     },
+    "node_modules/qs": {
+      "version": "6.15.0",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.15.0.tgz",
+      "integrity": "sha512-mAZTtNCeetKMH+pSjrb76NAM8V9a05I9aBZOHztWy/UqcJdQYNsf59vrRKWnojAT9Y+GbIvoTBC++CPHqpDBhQ==",
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "side-channel": "^1.1.0"
+      },
+      "engines": {
+        "node": ">=0.6"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
     "node_modules/quick-format-unescaped": {
       "version": "4.0.4",
       "resolved": "https://registry.npmjs.org/quick-format-unescaped/-/quick-format-unescaped-4.0.4.tgz",
       "integrity": "sha512-tYC1Q1hgyRuHgloV/YXs2w15unPVh8qfu/qCTfhTYamaw7fyhumKa2yGpdSo87vY32rIclj+4fWYQXUMs9EHvg==",
       "license": "MIT"
     },
+    "node_modules/range-parser": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz",
+      "integrity": "sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/raw-body": {
+      "version": "3.0.2",
+      "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-3.0.2.tgz",
+      "integrity": "sha512-K5zQjDllxWkf7Z5xJdV0/B0WTNqx6vxG70zJE4N0kBs4LovmEYWJzQGxC9bS9RAKu3bgM40lrd5zoLJ12MQ5BA==",
+      "license": "MIT",
+      "dependencies": {
+        "bytes": "~3.1.2",
+        "http-errors": "~2.0.1",
+        "iconv-lite": "~0.7.0",
+        "unpipe": "~1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.10"
+      }
+    },
     "node_modules/rc": {
       "version": "1.2.8",
       "resolved": "https://registry.npmjs.org/rc/-/rc-1.2.8.tgz",
@@ -8814,7 +9572,6 @@
       "version": "2.0.2",
       "resolved": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz",
       "integrity": "sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==",
-      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=0.10.0"
@@ -8909,6 +9666,22 @@
         "fsevents": "~2.3.2"
       }
     },
+    "node_modules/router": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/router/-/router-2.2.0.tgz",
+      "integrity": "sha512-nLTrUKm2UyiL7rlhapu/Zl45FwNgkZGaCpZbIHajDYgwlJCOzLSk+cIPAnsEqV955GjILJnKbdQC1nVPz+gAYQ==",
+      "license": "MIT",
+      "dependencies": {
+        "debug": "^4.4.0",
+        "depd": "^2.0.0",
+        "is-promise": "^4.0.0",
+        "parseurl": "^1.3.3",
+        "path-to-regexp": "^8.0.0"
+      },
+      "engines": {
+        "node": ">= 18"
+      }
+    },
     "node_modules/safe-buffer": {
       "version": "5.2.1",
       "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
@@ -8938,6 +9711,12 @@
         "node": ">=10"
       }
     },
+    "node_modules/safer-buffer": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
+      "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==",
+      "license": "MIT"
+    },
     "node_modules/secure-json-parse": {
       "version": "4.1.0",
       "resolved": "https://registry.npmjs.org/secure-json-parse/-/secure-json-parse-4.1.0.tgz",
@@ -9352,11 +10131,61 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/send": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/send/-/send-1.2.1.tgz",
+      "integrity": "sha512-1gnZf7DFcoIcajTjTwjwuDjzuz4PPcY2StKPlsGAQ1+YH20IRVrBaXSWmdjowTJ6u8Rc01PoYOGHXfP1mYcZNQ==",
+      "license": "MIT",
+      "dependencies": {
+        "debug": "^4.4.3",
+        "encodeurl": "^2.0.0",
+        "escape-html": "^1.0.3",
+        "etag": "^1.8.1",
+        "fresh": "^2.0.0",
+        "http-errors": "^2.0.1",
+        "mime-types": "^3.0.2",
+        "ms": "^2.1.3",
+        "on-finished": "^2.4.1",
+        "range-parser": "^1.2.1",
+        "statuses": "^2.0.2"
+      },
+      "engines": {
+        "node": ">= 18"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/serve-static": {
+      "version": "2.2.1",
+      "resolved": "https://registry.npmjs.org/serve-static/-/serve-static-2.2.1.tgz",
+      "integrity": "sha512-xRXBn0pPqQTVQiC8wyQrKs2MOlX24zQ0POGaj0kultvoOCstBQM5yvOhAVSUwOMjQtTvsPWoNCHfPGwaaQJhTw==",
+      "license": "MIT",
+      "dependencies": {
+        "encodeurl": "^2.0.0",
+        "escape-html": "^1.0.3",
+        "parseurl": "^1.3.3",
+        "send": "^1.2.0"
+      },
+      "engines": {
+        "node": ">= 18"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/setprototypeof": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz",
+      "integrity": "sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==",
+      "license": "ISC"
+    },
     "node_modules/shebang-command": {
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz",
       "integrity": "sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==",
-      "dev": true,
       "license": "MIT",
       "dependencies": {
         "shebang-regex": "^3.0.0"
@@ -9369,12 +10198,83 @@
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz",
       "integrity": "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==",
-      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=8"
       }
     },
+    "node_modules/side-channel": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz",
+      "integrity": "sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "object-inspect": "^1.13.3",
+        "side-channel-list": "^1.0.0",
+        "side-channel-map": "^1.0.1",
+        "side-channel-weakmap": "^1.0.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel-list": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.0.tgz",
+      "integrity": "sha512-FCLHtRD/gnpCiCHEiJLOwdmFP+wzCmDEkc9y7NsYxeF4u7Btsn1ZuwgwJGxImImHicJArLP4R0yX4c2KCrMrTA==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "object-inspect": "^1.13.3"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel-map": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz",
+      "integrity": "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bound": "^1.0.2",
+        "es-errors": "^1.3.0",
+        "get-intrinsic": "^1.2.5",
+        "object-inspect": "^1.13.3"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel-weakmap": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz",
+      "integrity": "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bound": "^1.0.2",
+        "es-errors": "^1.3.0",
+        "get-intrinsic": "^1.2.5",
+        "object-inspect": "^1.13.3",
+        "side-channel-map": "^1.0.1"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
     "node_modules/siginfo": {
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/siginfo/-/siginfo-2.0.0.tgz",
@@ -9677,6 +10577,15 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/statuses": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz",
+      "integrity": "sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
     "node_modules/std-env": {
       "version": "3.10.0",
       "resolved": "https://registry.npmjs.org/std-env/-/std-env-3.10.0.tgz",
@@ -10108,6 +11017,15 @@
         "node": ">=8.0"
       }
     },
+    "node_modules/toidentifier": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz",
+      "integrity": "sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.6"
+      }
+    },
     "node_modules/traverse": {
       "version": "0.6.8",
       "resolved": "https://registry.npmjs.org/traverse/-/traverse-0.6.8.tgz",
@@ -10202,6 +11120,20 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/type-is": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/type-is/-/type-is-2.0.1.tgz",
+      "integrity": "sha512-OZs6gsjF4vMp32qrCbiVSkrFmXtG/AZhY3t0iAMrMBiAZyV9oALtXO8hsrHbMXF9x6L3grlFuwW2oAz7cav+Gw==",
+      "license": "MIT",
+      "dependencies": {
+        "content-type": "^1.0.5",
+        "media-typer": "^1.1.0",
+        "mime-types": "^3.0.0"
+      },
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
     "node_modules/typescript": {
       "version": "5.9.3",
       "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
@@ -10327,6 +11259,15 @@
         "node": ">= 10.0.0"
       }
     },
+    "node_modules/unpipe": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz",
+      "integrity": "sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
     "node_modules/uri-js": {
       "version": "4.4.1",
       "resolved": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz",
@@ -10364,6 +11305,15 @@
         "spdx-expression-parse": "^3.0.0"
       }
     },
+    "node_modules/vary": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz",
+      "integrity": "sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
     "node_modules/viem": {
       "version": "2.45.1",
       "resolved": "https://registry.npmjs.org/viem/-/viem-2.45.1.tgz",
@@ -10558,7 +11508,6 @@
       "version": "2.0.2",
       "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz",
       "integrity": "sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==",
-      "dev": true,
       "license": "ISC",
       "dependencies": {
         "isexe": "^2.0.0"
@@ -10835,6 +11784,15 @@
         "url": "https://github.com/sponsors/colinhacks"
       }
     },
+    "node_modules/zod-to-json-schema": {
+      "version": "3.25.1",
+      "resolved": "https://registry.npmjs.org/zod-to-json-schema/-/zod-to-json-schema-3.25.1.tgz",
+      "integrity": "sha512-pM/SU9d3YAggzi6MtR4h7ruuQlqKtad8e9S0fmxcMi+ueAK5Korys/aWcV9LIIHTVbj01NdzxcnXSN+O74ZIVA==",
+      "license": "ISC",
+      "peerDependencies": {
+        "zod": "^3.25 || ^4"
+      }
+    },
     "packages/cli": {
       "name": "@opendatalabs/personal-server-ts",
       "version": "0.0.1",
@@ -10873,13 +11831,27 @@
         "url": "https://paulmillr.com/funding/"
       }
     },
+    "packages/mcp": {
+      "name": "@opendatalabs/personal-server-ts-mcp",
+      "version": "0.0.1",
+      "license": "MIT",
+      "dependencies": {
+        "@modelcontextprotocol/sdk": "^1.27.0",
+        "@opendatalabs/personal-server-ts-core": "*"
+      },
+      "bin": {
+        "personal-server-mcp": "dist/index.js"
+      }
+    },
     "packages/server": {
       "name": "@opendatalabs/personal-server-ts-server",
       "version": "0.0.1",
       "license": "MIT",
       "dependencies": {
         "@hono/node-server": "^1.14.0",
+        "@modelcontextprotocol/sdk": "^1.27.0",
         "@opendatalabs/personal-server-ts-core": "*",
+        "@opendatalabs/personal-server-ts-mcp": "*",
         "hono": "^4.7.0"
       }
     }
diff --git a/package.json b/package.json
index aab3302..fc6597a 100644
--- a/package.json
+++ b/package.json
@@ -28,6 +28,7 @@
     "lint:eslint:fix": "eslint --fix 'packages/*/src/**/*.ts'",
     "format": "prettier --write .",
     "format:check": "prettier --check .",
+    "mcp": "npm run build && node --env-file-if-exists=.env packages/mcp/dist/index.js",
     "register-server": "tsx --env-file-if-exists=.env scripts/register-server.ts",
     "register-builder": "tsx --env-file-if-exists=.env scripts/register-builder.ts",
     "validate": "npm run lint && npm run lint:eslint && npm run format:check && npm test",
diff --git a/packages/mcp/package.json b/packages/mcp/package.json
new file mode 100644
index 0000000..efdae59
--- /dev/null
+++ b/packages/mcp/package.json
@@ -0,0 +1,41 @@
+{
+  "name": "@opendatalabs/personal-server-ts-mcp",
+  "version": "0.0.1",
+  "description": "MCP (Model Context Protocol) server for the Vana Personal Server",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/vana-com/personal-server-ts.git",
+    "directory": "packages/mcp"
+  },
+  "homepage": "https://github.com/vana-com/personal-server-ts#readme",
+  "bugs": {
+    "url": "https://github.com/vana-com/personal-server-ts/issues"
+  },
+  "type": "module",
+  "bin": {
+    "personal-server-mcp": "./dist/index.js"
+  },
+  "main": "./dist/server.js",
+  "types": "./dist/server.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/server.d.ts",
+      "import": "./dist/server.js"
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc --build",
+    "start": "node dist/index.js"
+  },
+  "dependencies": {
+    "@opendatalabs/personal-server-ts-core": "*",
+    "@modelcontextprotocol/sdk": "^1.27.0"
+  }
+}
diff --git a/packages/mcp/src/index.ts b/packages/mcp/src/index.ts
new file mode 100644
index 0000000..351e524
--- /dev/null
+++ b/packages/mcp/src/index.ts
@@ -0,0 +1,70 @@
+#!/usr/bin/env node
+import { join } from "node:path";
+import pino from "pino";
+import { loadConfig } from "@opendatalabs/personal-server-ts-core/config";
+import {
+  resolveRootPath,
+  DEFAULT_ROOT_PATH,
+} from "@opendatalabs/personal-server-ts-core/config";
+import {
+  initializeDatabase,
+  createIndexManager,
+} from "@opendatalabs/personal-server-ts-core/storage/index";
+import { createGatewayClient } from "@opendatalabs/personal-server-ts-core/gateway";
+import { recoverServerOwner } from "@opendatalabs/personal-server-ts-core/keys";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { createMcpServer } from "./server.js";
+
+async function main(): Promise<void> {
+  const rootPath = process.env.PERSONAL_SERVER_ROOT_PATH;
+  const config = await loadConfig({ rootPath });
+
+  // Logger writes to stderr so stdout stays clean for MCP protocol
+  const logger = pino({ level: config.logging.level }, pino.destination(2));
+
+  // Derive owner from master key signature (required)
+  const masterKeySignature = process.env.VANA_MASTER_KEY_SIGNATURE as
+    | `0x${string}`
+    | undefined;
+  if (!masterKeySignature) {
+    logger.error("VANA_MASTER_KEY_SIGNATURE is required for MCP server");
+    process.exit(1);
+  }
+  const serverOwner = await recoverServerOwner(masterKeySignature);
+  logger.info({ owner: serverOwner }, "MCP server owner derived");
+
+  // Initialize data layer (same paths as HTTP server)
+  const storageRoot = resolveRootPath(rootPath ?? DEFAULT_ROOT_PATH);
+  const dataDir = join(storageRoot, "data");
+  const indexPath = join(storageRoot, "index.db");
+
+  const db = initializeDatabase(indexPath);
+  const indexManager = createIndexManager(db);
+  const hierarchyOptions = { dataDir };
+  const gatewayClient = createGatewayClient(config.gateway.url);
+
+  // Create and start MCP server
+  const mcpServer = createMcpServer({
+    indexManager,
+    hierarchyOptions,
+    gatewayClient,
+    serverOwner,
+    logger,
+  });
+
+  const transport = new StdioServerTransport();
+  await mcpServer.connect(transport);
+  logger.info("MCP server connected via stdio");
+
+  // Graceful shutdown
+  process.on("SIGINT", async () => {
+    await mcpServer.close();
+    indexManager.close();
+    process.exit(0);
+  });
+}
+
+main().catch((err) => {
+  console.error("MCP server failed:", err);
+  process.exit(1);
+});
diff --git a/packages/mcp/src/resources/files.ts b/packages/mcp/src/resources/files.ts
new file mode 100644
index 0000000..2899fef
--- /dev/null
+++ b/packages/mcp/src/resources/files.ts
@@ -0,0 +1,140 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { ResourceTemplate } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { readDataFile } from "@opendatalabs/personal-server-ts-core/storage/hierarchy";
+import type { McpContext } from "../types.js";
+
+export function registerFilesResources(
+  server: McpServer,
+  ctx: McpContext,
+): void {
+  // List all data files (distinct scopes)
+  server.registerResource(
+    "files",
+    "vana://files",
+    {
+      title: "All Data Files",
+      description: "List all data scopes and their latest versions",
+      mimeType: "application/json",
+    },
+    async (uri) => {
+      const result = ctx.indexManager.listDistinctScopes({
+        limit: 1000,
+      });
+      return {
+        contents: [
+          {
+            uri: uri.href,
+            mimeType: "application/json",
+            text: JSON.stringify(result.scopes, null, 2),
+          },
+        ],
+      };
+    },
+  );
+
+  // Get file content by scope
+  server.registerResource(
+    "file",
+    new ResourceTemplate("vana://file/{scope}", {
+      list: async () => {
+        const result = ctx.indexManager.listDistinctScopes({
+          limit: 1000,
+        });
+        return {
+          resources: result.scopes.map((s) => ({
+            uri: `vana://file/${s.scope}`,
+            name: s.scope,
+            description: `Latest version from ${s.latestCollectedAt} (${s.versionCount} versions)`,
+            mimeType: "application/json",
+          })),
+        };
+      },
+    }),
+    {
+      title: "Data File Content",
+      description: "Get the latest content of a data file by scope",
+      mimeType: "application/json",
+    },
+    async (uri, params) => {
+      const scope = params.scope as string;
+      const entry = ctx.indexManager.findLatestByScope(scope);
+      if (!entry) {
+        return {
+          contents: [
+            {
+              uri: uri.href,
+              mimeType: "text/plain",
+              text: `No data found for scope: ${scope}`,
+            },
+          ],
+        };
+      }
+      const envelope = await readDataFile(
+        ctx.hierarchyOptions,
+        scope,
+        entry.collectedAt,
+      );
+      return {
+        contents: [
+          {
+            uri: uri.href,
+            mimeType: "application/json",
+            text: JSON.stringify(envelope, null, 2),
+          },
+        ],
+      };
+    },
+  );
+
+  // File metadata by scope
+  server.registerResource(
+    "file-metadata",
+    new ResourceTemplate("vana://file/{scope}/metadata", {
+      list: async () => {
+        const result = ctx.indexManager.listDistinctScopes({
+          limit: 1000,
+        });
+        return {
+          resources: result.scopes.map((s) => ({
+            uri: `vana://file/${s.scope}/metadata`,
+            name: `${s.scope} metadata`,
+            mimeType: "application/json",
+          })),
+        };
+      },
+    }),
+    {
+      title: "Data File Metadata",
+      description:
+        "Get metadata about a data file (versions, size, timestamps)",
+      mimeType: "application/json",
+    },
+    async (uri, params) => {
+      const scope = params.scope as string;
+      const entries = ctx.indexManager.findByScope({
+        scope,
+        limit: 100,
+      });
+      const total = ctx.indexManager.countByScope(scope);
+      const metadata = {
+        scope,
+        totalVersions: total,
+        versions: entries.map((e) => ({
+          collectedAt: e.collectedAt,
+          createdAt: e.createdAt,
+          sizeBytes: e.sizeBytes,
+          fileId: e.fileId,
+        })),
+      };
+      return {
+        contents: [
+          {
+            uri: uri.href,
+            mimeType: "application/json",
+            text: JSON.stringify(metadata, null, 2),
+          },
+        ],
+      };
+    },
+  );
+}
diff --git a/packages/mcp/src/resources/grants.ts b/packages/mcp/src/resources/grants.ts
new file mode 100644
index 0000000..40a85a1
--- /dev/null
+++ b/packages/mcp/src/resources/grants.ts
@@ -0,0 +1,29 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { McpContext } from "../types.js";
+
+export function registerGrantsResource(
+  server: McpServer,
+  ctx: McpContext,
+): void {
+  server.registerResource(
+    "grants",
+    "vana://grants",
+    {
+      title: "Active Grants",
+      description: "List all data access grants for this user",
+      mimeType: "application/json",
+    },
+    async (uri) => {
+      const grants = await ctx.gatewayClient.listGrantsByUser(ctx.serverOwner);
+      return {
+        contents: [
+          {
+            uri: uri.href,
+            mimeType: "application/json",
+            text: JSON.stringify(grants, null, 2),
+          },
+        ],
+      };
+    },
+  );
+}
diff --git a/packages/mcp/src/resources/schemas.ts b/packages/mcp/src/resources/schemas.ts
new file mode 100644
index 0000000..664cf0a
--- /dev/null
+++ b/packages/mcp/src/resources/schemas.ts
@@ -0,0 +1,41 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { McpContext } from "../types.js";
+
+export function registerSchemasResource(
+  server: McpServer,
+  ctx: McpContext,
+): void {
+  server.registerResource(
+    "schemas",
+    "vana://schemas",
+    {
+      title: "Available Schemas",
+      description: "List schemas for all data scopes that have data",
+      mimeType: "application/json",
+    },
+    async (uri) => {
+      const { scopes } = ctx.indexManager.listDistinctScopes({
+        limit: 1000,
+      });
+      const schemas = await Promise.all(
+        scopes.map(async (s) => {
+          try {
+            const schema = await ctx.gatewayClient.getSchemaForScope(s.scope);
+            return schema ?? null;
+          } catch {
+            return null;
+          }
+        }),
+      );
+      return {
+        contents: [
+          {
+            uri: uri.href,
+            mimeType: "application/json",
+            text: JSON.stringify(schemas.filter(Boolean), null, 2),
+          },
+        ],
+      };
+    },
+  );
+}
diff --git a/packages/mcp/src/server.ts b/packages/mcp/src/server.ts
new file mode 100644
index 0000000..fa07ce3
--- /dev/null
+++ b/packages/mcp/src/server.ts
@@ -0,0 +1,29 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { McpContext } from "./types.js";
+import { registerFilesResources } from "./resources/files.js";
+import { registerGrantsResource } from "./resources/grants.js";
+import { registerSchemasResource } from "./resources/schemas.js";
+import { registerListFilesTool } from "./tools/list-files.js";
+import { registerGetFileTool } from "./tools/get-file.js";
+import { registerSearchFilesTool } from "./tools/search-files.js";
+
+export function createMcpServer(ctx: McpContext): McpServer {
+  const server = new McpServer({
+    name: "vana-personal-server",
+    version: "0.0.1",
+  });
+
+  // Resources
+  registerFilesResources(server, ctx);
+  registerGrantsResource(server, ctx);
+  registerSchemasResource(server, ctx);
+
+  // Tools
+  registerListFilesTool(server, ctx);
+  registerGetFileTool(server, ctx);
+  registerSearchFilesTool(server, ctx);
+
+  return server;
+}
+
+export type { McpContext } from "./types.js";
diff --git a/packages/mcp/src/tools/get-file.ts b/packages/mcp/src/tools/get-file.ts
new file mode 100644
index 0000000..19fc5f2
--- /dev/null
+++ b/packages/mcp/src/tools/get-file.ts
@@ -0,0 +1,96 @@
+import { z } from "zod";
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { readDataFile } from "@opendatalabs/personal-server-ts-core/storage/hierarchy";
+import type { McpContext } from "../types.js";
+
+function extractByPath(obj: unknown, path: string): unknown {
+  const parts = path.split(".");
+  let current: unknown = obj;
+  for (const part of parts) {
+    if (
+      current === null ||
+      current === undefined ||
+      typeof current !== "object"
+    ) {
+      return undefined;
+    }
+    current = (current as Record<string, unknown>)[part];
+  }
+  return current;
+}
+
+export function registerGetFileTool(server: McpServer, ctx: McpContext): void {
+  server.registerTool(
+    "get_file",
+    {
+      title: "Get File",
+      description:
+        "Get the content of a data file by scope. Returns the full data envelope or a filtered subset via dot-notation path (e.g. 'data.profile.name').",
+      inputSchema: {
+        scope: z.string().describe("The data scope (e.g. 'instagram.profile')"),
+        at: z
+          .string()
+          .datetime()
+          .optional()
+          .describe(
+            "Get the version closest to this ISO 8601 timestamp (default: latest)",
+          ),
+        path: z
+          .string()
+          .optional()
+          .describe(
+            "Dot-notation path to extract from the envelope (e.g. 'data.messages' or 'data.profile.name')",
+          ),
+      },
+      annotations: { readOnlyHint: true },
+    },
+    async ({ scope, at, path }) => {
+      const entry = at
+        ? ctx.indexManager.findClosestByScope(scope, at)
+        : ctx.indexManager.findLatestByScope(scope);
+
+      if (!entry) {
+        return {
+          content: [
+            {
+              type: "text" as const,
+              text: `No data found for scope: ${scope}`,
+            },
+          ],
+          isError: true,
+        };
+      }
+
+      const envelope = await readDataFile(
+        ctx.hierarchyOptions,
+        scope,
+        entry.collectedAt,
+      );
+
+      let result: unknown = envelope;
+      if (path) {
+        result = extractByPath(envelope, path);
+        if (result === undefined) {
+          return {
+            content: [
+              {
+                type: "text" as const,
+                text: `Path "${path}" not found in data for scope: ${scope}`,
+              },
+            ],
+            isError: true,
+          };
+        }
+      }
+
+      return {
+        content: [
+          {
+            type: "text" as const,
+            text: JSON.stringify(result, null, 2),
+          },
+        ],
+      };
+    },
+  );
+}
diff --git a/packages/mcp/src/tools/list-files.ts b/packages/mcp/src/tools/list-files.ts
new file mode 100644
index 0000000..8304a4d
--- /dev/null
+++ b/packages/mcp/src/tools/list-files.ts
@@ -0,0 +1,58 @@
+import { z } from "zod";
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { McpContext } from "../types.js";
+
+export function registerListFilesTool(
+  server: McpServer,
+  ctx: McpContext,
+): void {
+  server.registerTool(
+    "list_files",
+    {
+      title: "List Files",
+      description:
+        "List all data files, optionally filtered by scope prefix. Returns scope names, latest collection timestamps, and version counts.",
+      inputSchema: {
+        scopePrefix: z
+          .string()
+          .optional()
+          .describe(
+            "Filter scopes by prefix (e.g. 'instagram' to list all instagram.* scopes)",
+          ),
+        limit: z
+          .number()
+          .int()
+          .min(1)
+          .max(1000)
+          .optional()
+          .describe("Max results to return (default 100)"),
+        offset: z
+          .number()
+          .int()
+          .min(0)
+          .optional()
+          .describe("Offset for pagination"),
+      },
+      annotations: { readOnlyHint: true },
+    },
+    async ({ scopePrefix, limit, offset }) => {
+      const result = ctx.indexManager.listDistinctScopes({
+        scopePrefix: scopePrefix ?? undefined,
+        limit: limit ?? 100,
+        offset: offset ?? 0,
+      });
+      return {
+        content: [
+          {
+            type: "text" as const,
+            text: JSON.stringify(
+              { scopes: result.scopes, total: result.total },
+              null,
+              2,
+            ),
+          },
+        ],
+      };
+    },
+  );
+}
diff --git a/packages/mcp/src/tools/search-files.ts b/packages/mcp/src/tools/search-files.ts
new file mode 100644
index 0000000..b93bc01
--- /dev/null
+++ b/packages/mcp/src/tools/search-files.ts
@@ -0,0 +1,100 @@
+import { z } from "zod";
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { readDataFile } from "@opendatalabs/personal-server-ts-core/storage/hierarchy";
+import type { McpContext } from "../types.js";
+
+export function registerSearchFilesTool(
+  server: McpServer,
+  ctx: McpContext,
+): void {
+  server.registerTool(
+    "search_files",
+    {
+      title: "Search Files",
+      description:
+        "Search across all data files for a text query. Searches the JSON content of the latest version of each scope. Returns matching scopes with snippets.",
+      inputSchema: {
+        query: z.string().describe("Text to search for (case-insensitive)"),
+        scopePrefix: z
+          .string()
+          .optional()
+          .describe("Limit search to scopes matching this prefix"),
+        maxResults: z
+          .number()
+          .int()
+          .min(1)
+          .max(50)
+          .optional()
+          .describe("Maximum number of matching scopes to return (default 10)"),
+      },
+      annotations: { readOnlyHint: true },
+    },
+    async ({ query, scopePrefix, maxResults }) => {
+      const limit = maxResults ?? 10;
+      const { scopes } = ctx.indexManager.listDistinctScopes({
+        scopePrefix: scopePrefix ?? undefined,
+        limit: 500,
+      });
+
+      const matches: Array<{ scope: string; snippet: string }> = [];
+      const lowerQuery = query.toLowerCase();
+
+      for (const scopeSummary of scopes) {
+        if (matches.length >= limit) break;
+
+        const entry = ctx.indexManager.findLatestByScope(scopeSummary.scope);
+        if (!entry) continue;
+
+        try {
+          const envelope = await readDataFile(
+            ctx.hierarchyOptions,
+            scopeSummary.scope,
+            entry.collectedAt,
+          );
+          const content = JSON.stringify(envelope.data);
+          const lowerContent = content.toLowerCase();
+          const idx = lowerContent.indexOf(lowerQuery);
+          if (idx !== -1) {
+            const start = Math.max(0, idx - 100);
+            const end = Math.min(content.length, idx + query.length + 100);
+            const snippet =
+              (start > 0 ? "..." : "") +
+              content.slice(start, end) +
+              (end < content.length ? "..." : "");
+            matches.push({ scope: scopeSummary.scope, snippet });
+          }
+        } catch {
+          continue;
+        }
+      }
+
+      if (matches.length === 0) {
+        return {
+          content: [
+            {
+              type: "text" as const,
+              text: `No matches found for "${query}"`,
+            },
+          ],
+        };
+      }
+
+      return {
+        content: [
+          {
+            type: "text" as const,
+            text: JSON.stringify(
+              {
+                query,
+                matches,
+                totalScanned: scopes.length,
+              },
+              null,
+              2,
+            ),
+          },
+        ],
+      };
+    },
+  );
+}
diff --git a/packages/mcp/src/types.ts b/packages/mcp/src/types.ts
new file mode 100644
index 0000000..7cdfe6b
--- /dev/null
+++ b/packages/mcp/src/types.ts
@@ -0,0 +1,12 @@
+import type { IndexManager } from "@opendatalabs/personal-server-ts-core/storage/index";
+import type { HierarchyManagerOptions } from "@opendatalabs/personal-server-ts-core/storage/hierarchy";
+import type { GatewayClient } from "@opendatalabs/personal-server-ts-core/gateway";
+import type { Logger } from "pino";
+
+export interface McpContext {
+  indexManager: IndexManager;
+  hierarchyOptions: HierarchyManagerOptions;
+  gatewayClient: GatewayClient;
+  serverOwner: `0x${string}`;
+  logger: Logger;
+}
diff --git a/packages/mcp/tsconfig.json b/packages/mcp/tsconfig.json
new file mode 100644
index 0000000..49b37cc
--- /dev/null
+++ b/packages/mcp/tsconfig.json
@@ -0,0 +1,14 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "outDir": "dist",
+    "rootDir": "src",
+    "composite": true,
+    "declaration": true,
+    "declarationMap": true,
+    "sourceMap": true
+  },
+  "include": ["src/**/*.ts"],
+  "exclude": ["src/**/*.test.ts"],
+  "references": [{ "path": "../core" }]
+}
diff --git a/packages/server/package.json b/packages/server/package.json
index 616a62f..d86e28c 100644
--- a/packages/server/package.json
+++ b/packages/server/package.json
@@ -39,6 +39,8 @@
   },
   "dependencies": {
     "@opendatalabs/personal-server-ts-core": "*",
+    "@opendatalabs/personal-server-ts-mcp": "*",
+    "@modelcontextprotocol/sdk": "^1.27.0",
     "hono": "^4.7.0",
     "@hono/node-server": "^1.14.0"
   }
diff --git a/packages/server/src/app.ts b/packages/server/src/app.ts
index 16e5d7e..fe39442 100644
--- a/packages/server/src/app.ts
+++ b/packages/server/src/app.ts
@@ -13,6 +13,9 @@ import { accessLogsRoutes } from "./routes/access-logs.js";
 import { syncRoutes } from "./routes/sync.js";
 import { uiConfigRoutes } from "./routes/ui-config.js";
 import { uiRoute } from "./routes/ui.js";
+import { mcpRoute } from "./routes/mcp.js";
+import { OAuthProvider } from "./oauth/provider.js";
+import { oauthRoutes } from "./oauth/routes.js";
 import type { SyncManager } from "@opendatalabs/personal-server-ts-core/sync";
 import type { ServerSigner } from "@opendatalabs/personal-server-ts-core/signing";
 import type { Logger } from "pino";
@@ -50,7 +53,14 @@ export function createApp(deps: AppDeps): Hono {
     "*",
     cors({
       origin: "*",
-      allowHeaders: ["Content-Type", "Authorization"],
+      allowHeaders: [
+        "Content-Type",
+        "Authorization",
+        "mcp-session-id",
+        "Last-Event-ID",
+        "mcp-protocol-version",
+      ],
+      exposeHeaders: ["mcp-session-id", "mcp-protocol-version"],
       allowMethods: ["GET", "POST", "PUT", "DELETE", "OPTIONS"],
       maxAge: 86400,
     }),
@@ -123,6 +133,37 @@ export function createApp(deps: AppDeps): Hono {
     }),
   );
 
+  // Mount MCP endpoint (Model Context Protocol for AI tools)
+  if (deps.serverOwner) {
+    const oauthProvider = new OAuthProvider(deps.serverOwner);
+
+    // Mount OAuth discovery + auth endpoints at the root
+    app.route(
+      "/",
+      oauthRoutes({
+        oauthProvider,
+        serverOwner: deps.serverOwner,
+        accountPortalOrigin: process.env.ACCOUNT_URL,
+        serverOrigin: deps.serverOrigin,
+      }),
+    );
+
+    app.route(
+      "/mcp",
+      mcpRoute({
+        mcpContext: {
+          indexManager: deps.indexManager,
+          hierarchyOptions: deps.hierarchyOptions,
+          gatewayClient: deps.gateway,
+          serverOwner: deps.serverOwner,
+          logger: deps.logger,
+        },
+        oauthProvider,
+        serverOrigin: deps.serverOrigin,
+      }),
+    );
+  }
+
   // Mount dev UI routes when dev token is available
   if (deps.devToken) {
     app.route("/ui", uiRoute({ devToken: deps.devToken }));
diff --git a/packages/server/src/oauth/provider.ts b/packages/server/src/oauth/provider.ts
new file mode 100644
index 0000000..f65560d
--- /dev/null
+++ b/packages/server/src/oauth/provider.ts
@@ -0,0 +1,243 @@
+import { randomBytes, createHash } from "node:crypto";
+import type { AuthInfo } from "@modelcontextprotocol/sdk/server/auth/types.js";
+
+export interface OAuthClientMetadata {
+  redirect_uris: string[];
+  client_name?: string;
+  token_endpoint_auth_method?: string;
+}
+
+export interface OAuthClient {
+  client_id: string;
+  client_secret: string;
+  redirect_uris: string[];
+  client_name?: string;
+  client_id_issued_at: number;
+}
+
+interface PendingAuth {
+  clientId: string;
+  redirectUri: string;
+  codeChallenge: string;
+  codeChallengeMethod: "S256";
+  state: string | null;
+  scopes: string[];
+  walletAddress?: `0x${string}`;
+  createdAt: number;
+}
+
+interface TokenRecord {
+  clientId: string;
+  walletAddress: `0x${string}`;
+  scopes: string[];
+  expiresAt: number;
+}
+
+function generateId(): string {
+  return randomBytes(32).toString("hex");
+}
+
+const TOKEN_TTL_MS = 60 * 60 * 1000; // 1 hour
+const AUTH_CODE_TTL_MS = 5 * 60 * 1000; // 5 minutes
+
+export class OAuthProvider {
+  private clients = new Map<string, OAuthClient>();
+  private pendingAuths = new Map<string, PendingAuth>();
+  private tokens = new Map<string, TokenRecord>();
+  private refreshTokens = new Map<
+    string,
+    { clientId: string; walletAddress: `0x${string}`; scopes: string[] }
+  >();
+
+  constructor(private readonly serverOwner: `0x${string}`) {}
+
+  registerClient(metadata: OAuthClientMetadata): OAuthClient {
+    if (!metadata.redirect_uris || metadata.redirect_uris.length === 0) {
+      throw new Error("redirect_uris is required");
+    }
+
+    const client: OAuthClient = {
+      client_id: generateId(),
+      client_secret: generateId(),
+      redirect_uris: metadata.redirect_uris,
+      client_name: metadata.client_name,
+      client_id_issued_at: Math.floor(Date.now() / 1000),
+    };
+
+    this.clients.set(client.client_id, client);
+    return client;
+  }
+
+  getClient(clientId: string): OAuthClient | undefined {
+    return this.clients.get(clientId);
+  }
+
+  createPendingAuth(opts: {
+    clientId: string;
+    redirectUri: string;
+    codeChallenge: string;
+    codeChallengeMethod: "S256";
+    state: string | null;
+    scopes: string[];
+  }): string {
+    const client = this.clients.get(opts.clientId);
+    if (!client) throw new Error("Unknown client");
+    if (!client.redirect_uris.includes(opts.redirectUri)) {
+      throw new Error("Invalid redirect_uri");
+    }
+
+    const authCode = generateId();
+    this.pendingAuths.set(authCode, {
+      clientId: opts.clientId,
+      redirectUri: opts.redirectUri,
+      codeChallenge: opts.codeChallenge,
+      codeChallengeMethod: opts.codeChallengeMethod,
+      state: opts.state,
+      scopes: opts.scopes,
+      createdAt: Date.now(),
+    });
+
+    return authCode;
+  }
+
+  completeAuth(
+    authCode: string,
+    walletAddress: `0x${string}`,
+  ): { redirectUri: string; state: string | null } {
+    const pending = this.pendingAuths.get(authCode);
+    if (!pending) throw new Error("Unknown auth code");
+    pending.walletAddress = walletAddress;
+    return { redirectUri: pending.redirectUri, state: pending.state };
+  }
+
+  exchangeCode(
+    authCode: string,
+    codeVerifier: string,
+    clientId: string,
+  ): {
+    access_token: string;
+    token_type: string;
+    expires_in: number;
+    refresh_token: string;
+  } {
+    const pending = this.pendingAuths.get(authCode);
+    if (!pending) throw new Error("Invalid authorization code");
+    if (pending.clientId !== clientId) throw new Error("Client mismatch");
+    if (!pending.walletAddress) throw new Error("Authorization not completed");
+    if (Date.now() - pending.createdAt > AUTH_CODE_TTL_MS) {
+      this.pendingAuths.delete(authCode);
+      throw new Error("Authorization code expired");
+    }
+
+    // Verify PKCE challenge
+    if (!this.verifyCodeChallenge(codeVerifier, pending.codeChallenge)) {
+      throw new Error("Invalid code_verifier");
+    }
+
+    // Single-use: remove the auth code
+    this.pendingAuths.delete(authCode);
+
+    const accessToken = generateId();
+    const refreshToken = generateId();
+    const expiresIn = Math.floor(TOKEN_TTL_MS / 1000);
+
+    this.tokens.set(accessToken, {
+      clientId,
+      walletAddress: pending.walletAddress,
+      scopes: pending.scopes,
+      expiresAt: Date.now() + TOKEN_TTL_MS,
+    });
+
+    this.refreshTokens.set(refreshToken, {
+      clientId,
+      walletAddress: pending.walletAddress,
+      scopes: pending.scopes,
+    });
+
+    return {
+      access_token: accessToken,
+      token_type: "bearer",
+      expires_in: expiresIn,
+      refresh_token: refreshToken,
+    };
+  }
+
+  verifyToken(token: string): AuthInfo | null {
+    const record = this.tokens.get(token);
+    if (!record) return null;
+    if (Date.now() > record.expiresAt) {
+      this.tokens.delete(token);
+      return null;
+    }
+
+    return {
+      token,
+      clientId: record.clientId,
+      scopes: record.scopes,
+      expiresAt: Math.floor(record.expiresAt / 1000),
+    };
+  }
+
+  refreshAccessToken(
+    refreshToken: string,
+    clientId: string,
+  ): {
+    access_token: string;
+    token_type: string;
+    expires_in: number;
+    refresh_token: string;
+  } {
+    const record = this.refreshTokens.get(refreshToken);
+    if (!record) throw new Error("Invalid refresh token");
+    if (record.clientId !== clientId) throw new Error("Client mismatch");
+
+    // Rotate: remove old refresh token
+    this.refreshTokens.delete(refreshToken);
+
+    const newAccessToken = generateId();
+    const newRefreshToken = generateId();
+    const expiresIn = Math.floor(TOKEN_TTL_MS / 1000);
+
+    this.tokens.set(newAccessToken, {
+      clientId,
+      walletAddress: record.walletAddress,
+      scopes: record.scopes,
+      expiresAt: Date.now() + TOKEN_TTL_MS,
+    });
+
+    this.refreshTokens.set(newRefreshToken, {
+      clientId,
+      walletAddress: record.walletAddress,
+      scopes: record.scopes,
+    });
+
+    return {
+      access_token: newAccessToken,
+      token_type: "bearer",
+      expires_in: expiresIn,
+      refresh_token: newRefreshToken,
+    };
+  }
+
+  /**
+   * Check if a wallet has access (is the owner or has a grant).
+   * For now, only the server owner gets full access.
+   */
+  isAuthorizedWallet(walletAddress: `0x${string}`): boolean {
+    return walletAddress.toLowerCase() === this.serverOwner.toLowerCase();
+  }
+
+  private verifyCodeChallenge(
+    codeVerifier: string,
+    codeChallenge: string,
+  ): boolean {
+    // S256: BASE64URL(SHA256(code_verifier)) === code_challenge
+    const hash = createHash("sha256").update(codeVerifier).digest();
+    const computed = hash
+      .toString("base64")
+      .replace(/\+/g, "-")
+      .replace(/\//g, "_")
+      .replace(/=+$/, "");
+    return computed === codeChallenge;
+  }
+}
diff --git a/packages/server/src/oauth/routes.ts b/packages/server/src/oauth/routes.ts
new file mode 100644
index 0000000..3ce17e3
--- /dev/null
+++ b/packages/server/src/oauth/routes.ts
@@ -0,0 +1,281 @@
+import { Hono } from "hono";
+import { recoverServerOwner } from "@opendatalabs/personal-server-ts-core/keys";
+import type { OAuthProvider } from "./provider.js";
+
+const DEFAULT_ACCOUNT_PORTAL_ORIGIN = "https://account.vana.org";
+
+export interface OAuthRouteDeps {
+  oauthProvider: OAuthProvider;
+  serverOwner: `0x${string}`;
+  accountPortalOrigin?: string;
+  serverOrigin?: string | (() => string);
+}
+
+export function oauthRoutes(deps: OAuthRouteDeps): Hono {
+  const app = new Hono();
+  const { oauthProvider } = deps;
+  const accountPortalOrigin =
+    deps.accountPortalOrigin ?? DEFAULT_ACCOUNT_PORTAL_ORIGIN;
+
+  /** Resolve the public-facing origin (tunnel URL when available, else request origin). */
+  function getPublicOrigin(c: { req: { url: string } }): string {
+    if (deps.serverOrigin) {
+      const origin =
+        typeof deps.serverOrigin === "function"
+          ? deps.serverOrigin()
+          : deps.serverOrigin;
+      if (origin) return origin;
+    }
+    return new URL(c.req.url).origin;
+  }
+
+  // --- Discovery endpoints ---
+
+  app.get("/.well-known/oauth-authorization-server", (c) => {
+    const issuer = getPublicOrigin(c);
+    return c.json({
+      issuer,
+      authorization_endpoint: `${issuer}/authorize`,
+      token_endpoint: `${issuer}/token`,
+      registration_endpoint: `${issuer}/register`,
+      response_types_supported: ["code"],
+      grant_types_supported: ["authorization_code", "refresh_token"],
+      token_endpoint_auth_methods_supported: ["client_secret_post"],
+      code_challenge_methods_supported: ["S256"],
+    });
+  });
+
+  app.get("/.well-known/oauth-protected-resource", (c) => {
+    const origin = getPublicOrigin(c);
+    return c.json({
+      resource: origin,
+      authorization_servers: [origin],
+    });
+  });
+
+  // --- Dynamic Client Registration (RFC 7591) ---
+
+  app.post("/register", async (c) => {
+    try {
+      const body = await c.req.json();
+      const client = oauthProvider.registerClient({
+        redirect_uris: body.redirect_uris,
+        client_name: body.client_name,
+        token_endpoint_auth_method: body.token_endpoint_auth_method,
+      });
+
+      return c.json(
+        {
+          client_id: client.client_id,
+          client_secret: client.client_secret,
+          redirect_uris: client.redirect_uris,
+          client_name: client.client_name,
+          client_id_issued_at: client.client_id_issued_at,
+        },
+        201,
+      );
+    } catch (err) {
+      return c.json(
+        { error: "invalid_client_metadata", error_description: String(err) },
+        400,
+      );
+    }
+  });
+
+  // --- Authorization endpoint ---
+
+  app.get("/authorize", (c) => {
+    const clientId = c.req.query("client_id");
+    const redirectUri = c.req.query("redirect_uri");
+    const codeChallenge = c.req.query("code_challenge");
+    const codeChallengeMethod = c.req.query("code_challenge_method");
+    const state = c.req.query("state") ?? null;
+    const scope = c.req.query("scope") ?? "";
+    const responseType = c.req.query("response_type");
+
+    if (responseType !== "code") {
+      return c.json({ error: "unsupported_response_type" }, 400);
+    }
+    if (!clientId || !redirectUri || !codeChallenge) {
+      return c.json(
+        {
+          error: "invalid_request",
+          error_description: "Missing required parameters",
+        },
+        400,
+      );
+    }
+    if (codeChallengeMethod !== "S256") {
+      return c.json(
+        {
+          error: "invalid_request",
+          error_description: "Only S256 code_challenge_method is supported",
+        },
+        400,
+      );
+    }
+
+    const client = oauthProvider.getClient(clientId);
+    if (!client) {
+      return c.json({ error: "invalid_client" }, 400);
+    }
+    if (!client.redirect_uris.includes(redirectUri)) {
+      return c.json(
+        {
+          error: "invalid_request",
+          error_description: "redirect_uri not registered",
+        },
+        400,
+      );
+    }
+
+    const scopes = scope ? scope.split(" ") : [];
+
+    let authCode: string;
+    try {
+      authCode = oauthProvider.createPendingAuth({
+        clientId,
+        redirectUri,
+        codeChallenge,
+        codeChallengeMethod: "S256",
+        state,
+        scopes,
+      });
+    } catch (err) {
+      return c.json(
+        { error: "server_error", error_description: String(err) },
+        500,
+      );
+    }
+
+    // Redirect to Account Portal for identity verification.
+    // The callback URL points back to our /oauth/callback with the auth code as state.
+    const callbackUrl = `${getPublicOrigin(c)}/oauth/callback`;
+
+    const portalParams = new URLSearchParams({
+      // Use a placeholder sessionId — the Account Portal requires one to render the connect page.
+      // We pass the authCode via the redirect_uri so it comes back to us.
+      sessionId: `mcp-oauth-${authCode.slice(0, 8)}`,
+      redirect_uri: callbackUrl,
+      oauth_state: authCode,
+      appName: client.client_name ?? "MCP Client",
+    });
+
+    return c.redirect(
+      `${accountPortalOrigin}/connect?${portalParams.toString()}`,
+    );
+  });
+
+  // --- OAuth callback (receives wallet proof from Account Portal) ---
+
+  app.get("/oauth/callback", async (c) => {
+    const masterKeySig = c.req.query("masterKeySig") as
+      | `0x${string}`
+      | undefined;
+    const authCode = c.req.query("oauth_state");
+
+    if (!masterKeySig || !authCode) {
+      return c.text("Missing masterKeySig or oauth_state parameter", 400);
+    }
+
+    // Recover wallet address from the master key signature
+    let walletAddress: `0x${string}`;
+    try {
+      walletAddress = await recoverServerOwner(masterKeySig);
+    } catch {
+      return c.text("Invalid master key signature", 400);
+    }
+
+    // Check authorization: must be the server owner
+    if (!oauthProvider.isAuthorizedWallet(walletAddress)) {
+      return c.text("Unauthorized: wallet is not the server owner", 403);
+    }
+
+    // Complete the pending auth with the verified wallet
+    let authResult: { redirectUri: string; state: string | null };
+    try {
+      authResult = oauthProvider.completeAuth(authCode, walletAddress);
+    } catch (err) {
+      return c.text(`Authorization failed: ${err}`, 400);
+    }
+
+    // Redirect back to the OAuth client (e.g., Claude) with the auth code
+    const redirectUrl = new URL(authResult.redirectUri);
+    redirectUrl.searchParams.set("code", authCode);
+    if (authResult.state) {
+      redirectUrl.searchParams.set("state", authResult.state);
+    }
+
+    return c.redirect(redirectUrl.toString());
+  });
+
+  // --- Token endpoint ---
+
+  app.post("/token", async (c) => {
+    const contentType = c.req.header("content-type") ?? "";
+    let body: Record<string, string>;
+
+    if (contentType.includes("application/x-www-form-urlencoded")) {
+      const formData = await c.req.parseBody();
+      body = Object.fromEntries(
+        Object.entries(formData).map(([k, v]) => [k, String(v)]),
+      );
+    } else {
+      body = await c.req.json();
+    }
+
+    const grantType = body.grant_type;
+    const clientId = body.client_id;
+
+    if (!clientId) {
+      return c.json(
+        { error: "invalid_client", error_description: "Missing client_id" },
+        400,
+      );
+    }
+
+    try {
+      if (grantType === "authorization_code") {
+        const code = body.code;
+        const codeVerifier = body.code_verifier;
+        if (!code || !codeVerifier) {
+          return c.json(
+            {
+              error: "invalid_request",
+              error_description: "Missing code or code_verifier",
+            },
+            400,
+          );
+        }
+
+        const tokens = oauthProvider.exchangeCode(code, codeVerifier, clientId);
+        return c.json(tokens);
+      }
+
+      if (grantType === "refresh_token") {
+        const refreshToken = body.refresh_token;
+        if (!refreshToken) {
+          return c.json(
+            {
+              error: "invalid_request",
+              error_description: "Missing refresh_token",
+            },
+            400,
+          );
+        }
+
+        const tokens = oauthProvider.refreshAccessToken(refreshToken, clientId);
+        return c.json(tokens);
+      }
+
+      return c.json({ error: "unsupported_grant_type" }, 400);
+    } catch (err) {
+      return c.json(
+        { error: "invalid_grant", error_description: String(err) },
+        400,
+      );
+    }
+  });
+
+  return app;
+}
diff --git a/packages/server/src/routes/mcp.ts b/packages/server/src/routes/mcp.ts
new file mode 100644
index 0000000..46626f8
--- /dev/null
+++ b/packages/server/src/routes/mcp.ts
@@ -0,0 +1,79 @@
+import { Hono } from "hono";
+import { WebStandardStreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
+import { createMcpServer } from "@opendatalabs/personal-server-ts-mcp";
+import type { McpContext } from "@opendatalabs/personal-server-ts-mcp";
+import type { OAuthProvider } from "../oauth/provider.js";
+
+export interface McpRouteDeps {
+  mcpContext: McpContext;
+  oauthProvider?: OAuthProvider;
+  serverOrigin?: string | (() => string);
+}
+
+export function mcpRoute(deps: McpRouteDeps): Hono {
+  const app = new Hono();
+
+  app.all("/", async (c) => {
+    // Require bearer token when OAuth is configured
+    if (deps.oauthProvider) {
+      const authHeader = c.req.header("authorization");
+      if (!authHeader || !authHeader.startsWith("Bearer ")) {
+        let origin: string;
+        if (deps.serverOrigin) {
+          const o =
+            typeof deps.serverOrigin === "function"
+              ? deps.serverOrigin()
+              : deps.serverOrigin;
+          origin = o || new URL(c.req.url).origin;
+        } else {
+          origin = new URL(c.req.url).origin;
+        }
+        return new Response(
+          JSON.stringify({
+            error: "Unauthorized",
+            error_description: "Bearer token required",
+          }),
+          {
+            status: 401,
+            headers: {
+              "WWW-Authenticate": `Bearer resource_metadata="${origin}/.well-known/oauth-protected-resource"`,
+              "Content-Type": "application/json",
+            },
+          },
+        );
+      }
+
+      const token = authHeader.slice(7);
+      const authInfo = deps.oauthProvider.verifyToken(token);
+      if (!authInfo) {
+        return new Response(
+          JSON.stringify({
+            error: "invalid_token",
+            error_description: "Token expired or invalid",
+          }),
+          {
+            status: 401,
+            headers: {
+              "WWW-Authenticate": 'Bearer error="invalid_token"',
+              "Content-Type": "application/json",
+            },
+          },
+        );
+      }
+
+      // Pass authInfo to the MCP transport
+      const transport = new WebStandardStreamableHTTPServerTransport();
+      const server = createMcpServer(deps.mcpContext);
+      await server.connect(transport);
+      return transport.handleRequest(c.req.raw, { authInfo });
+    }
+
+    // No OAuth configured — open access (dev/local mode)
+    const transport = new WebStandardStreamableHTTPServerTransport();
+    const server = createMcpServer(deps.mcpContext);
+    await server.connect(transport);
+    return transport.handleRequest(c.req.raw);
+  });
+
+  return app;
+}
diff --git a/packages/server/tsconfig.json b/packages/server/tsconfig.json
index 49b37cc..d39298f 100644
--- a/packages/server/tsconfig.json
+++ b/packages/server/tsconfig.json
@@ -10,5 +10,5 @@
   },
   "include": ["src/**/*.ts"],
   "exclude": ["src/**/*.test.ts"],
-  "references": [{ "path": "../core" }]
+  "references": [{ "path": "../core" }, { "path": "../mcp" }]
 }
diff --git a/tsconfig.json b/tsconfig.json
index 43cb43a..453aed2 100644
--- a/tsconfig.json
+++ b/tsconfig.json
@@ -3,6 +3,7 @@
     { "path": "packages/core" },
     { "path": "packages/server" },
     { "path": "packages/cli" },
+    { "path": "packages/mcp" },
     { "path": "scripts" }
   ],
   "files": []