SpringBoot集成MCP实现SSE实时通信功能

┌──────────────┐
│ MCP 客户端   │
└────┬────┬────┘
     │    │
SSE连接 HTTP请求
     │    │
┌────▼────┴────┐
│ MCP 控制器   │ ← 拦截器做权限校验
├──────────────┤
│ /sse/stream   ← 建立 SSE 连接
│ /mcp/receive  ← 接收 POST 请求
└────┬─────────┘
     │
┌────▼──────┐
│ McpService │ ← 扫描方法 + 执行 + 推送
└───────────┘

@GetMapping("/sse/stream")
public SseEmitter connect(@RequestParam String token) {
    return sseManager.createEmitter(token);
}

@PostMapping("/mcp/receive")
public void handle(@RequestBody McpRequest req) {
    mcpService.invoke(req.getToken(), req.getMethod(), req.getParams());
}

Map<String, Set<String>> tokenToTools = new ConcurrentHashMap<>();
tokenToTools.put("u123-token", Set.of("createOrder", "checkInventory"));

Error: You are not allowed to use tool 'createPurchaseOrder'

@Retention(RetentionPolicy.RUNTIME)
@Target(ElementType.METHOD)
public @interface McpMethod {
    String name(); // 工具名
    String desc(); // 工具描述
}

@PostConstruct
public void scanMcpMethods() {
    // 反射扫描标注了 @McpMethod 的方法并注册
}

public Object invoke(String token, String method, Map<String, Object> params) {
    if (!hasPermission(token, method)) {
        throw new UnauthorizedException();
    }
    Method tool = toolRegistry.get(method);
    Object result = tool.invoke(...);
    sseManager.pushToClient(token, result);
    return result;
}

public void pushToClient(String token, Object msg) {
    SseEmitter emitter = emitterMap.get(token);
    emitter.send(SseEmitter.event().data(msg));
}

http://your-server-host/mcp/sse/stream