feature: add global and branch session and lock management MCP tools #7893

Xb2555 · 2025-12-23T15:24:47Z

I have read the CONTRIBUTING.md guidelines.
I have registered the PR changes.

Ⅰ. Describe what this PR did

tool for obtaining namespace information of registered TC nodes has been implemented
Management tools for global and branch session have been implemented
The function of remotely invoking the TC interface has been realized
A global lock management tool has been implemented

Ⅱ. Does this pull request fix one issue?

Ⅲ. Why don't you add test cases (unit test/integration test)?

Ⅳ. Describe how to verify it

Ⅴ. Special notes for reviews

…o get token easily

…on and structuring

codecov · 2025-12-23T16:07:03Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 70.85%. Comparing base (340aa3c) to head (bbee2f9).

Additional details and impacted files

@@             Coverage Diff              @@
##                2.x    #7893      +/-   ##
============================================
- Coverage     71.20%   70.85%   -0.35%     
  Complexity      797      797              
============================================
  Files          1300     1300              
  Lines         49620    49620              
  Branches       5874     5874              
============================================
- Hits          35331    35158     -173     
- Misses        11371    11548     +177     
+ Partials       2918     2914       -4

Files with missing lines	Coverage Δ
...java/org/apache/seata/core/model/GlobalStatus.java	`97.67% <ø> (ø)`
...a/server/console/entity/param/GlobalLockParam.java	`0.00% <ø> (ø)`
...erver/console/entity/param/GlobalSessionParam.java	`0.00% <ø> (ø)`
...eata/server/console/entity/vo/BranchSessionVO.java	`0.00% <ø> (ø)`
...eata/server/console/entity/vo/GlobalSessionVO.java	`0.00% <ø> (ø)`

... and 12 files with indirect coverage changes

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Copilot

Pull request overview

This PR adds MCP (Model Context Protocol) tools to enable LLM-based management of Seata's global transactions, branch sessions, and distributed locks. It implements namespace discovery, session management operations, lock management, and a user confirmation mechanism for destructive operations.

Key Changes:

Introduced MCP tool classes for querying and managing global/branch sessions and locks with user confirmation workflow
Added RPC service layer for communicating with TC nodes via REST APIs with JWT authentication
Enhanced JWT token handling to support async dispatches and preserve credentials for MCP operations

Reviewed changes

Copilot reviewed 27 out of 27 changed files in this pull request and generated 21 comments.

Show a summary per file

File	Description
NameSpaceTools.java	Provides tool to discover registered TC node namespaces and clusters
ModifyConfirmTools.java	Implements user confirmation mechanism before destructive operations
GlobalSessionTools.java	MCP tools for querying, deleting, and managing global transaction sessions
BranchSessionTools.java	MCP tools for managing branch transaction lifecycle operations
GlobalLockTools.java	MCP tools for querying, checking, and deleting distributed locks
ModifyConfirmServiceImpl.java	Service implementation for generating and validating time-limited modification keys
MCPRPCServiceImpl.java	RPC service for making authenticated HTTP calls to TC nodes
GlobalSessionVO.java	Value object for global session data serialization
GlobalLockVO.java	Value object for global lock data serialization
BranchSessionVO.java	Value object for branch session data serialization
GlobalSessionParamDto.java	DTO for global session query parameters with time range support
GlobalLockParamDto.java	DTO for global lock query parameters
GlobalSessionParam.java	Internal parameter object for global session queries
GlobalLockParam.java	Internal parameter object for global lock queries
GlobalLockDeleteParam.java	Parameter object for lock deletion operations
GlobalAbnormalSessionParam.java	Parameter object for querying abnormal transaction sessions
DateUtils.java	Utility class for date/time conversions and validations
TimestampToStringDeserializer.java	Jackson deserializer for converting timestamps to formatted strings
NameSpaceDetail.java	Configuration object for specifying TC node namespace details
RPCConstant.java	Constants for REST API endpoint paths
JwtTokenUtils.java	Updated to preserve JWT token in authentication credentials
JwtAuthenticationTokenFilter.java	Enhanced to support async request dispatching
pom.xml	Added seata-core dependency for MCP tools
changes/zh-cn/2.x.md	Chinese changelog entry
changes/en-us/2.x.md	English changelog entry

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

console/src/main/java/org/apache/seata/mcp/tools/GlobalSessionTools.java

console/src/main/java/org/apache/seata/mcp/service/impl/ConsoleRemoteServiceImpl.java

console/src/main/java/org/apache/seata/mcp/core/utils/DateUtils.java

console/src/main/java/org/apache/seata/mcp/service/impl/MCPRPCServiceImpl.java

console/src/main/java/org/apache/seata/mcp/core/props/NameSpaceDetail.java

console/src/main/java/org/apache/seata/mcp/service/impl/MCPRPCServiceImpl.java

console/src/main/java/org/apache/seata/mcp/service/impl/ConsoleRemoteServiceImpl.java

console/pom.xml

console/src/main/java/org/apache/seata/mcp/service/impl/ConsoleRemoteServiceImpl.java

Copilot

Pull request overview

Copilot reviewed 30 out of 36 changed files in this pull request and generated 17 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

console/src/main/java/org/apache/seata/mcp/service/impl/ConsoleRemoteServiceImpl.java

console/src/main/java/org/apache/seata/mcp/entity/dto/McpGlobalSessionParamDto.java

console/src/main/java/org/apache/seata/mcp/tools/GlobalSessionTools.java

Copilot · 2025-12-25T07:50:01Z

console/src/main/java/org/apache/seata/mcp/tools/ModifyConfirmTools.java

+        if (!userInputStr.contains("确认") && !userInputStr.contains("confirm")) {
+            throw new IllegalArgumentException(
+                    "Confirmation string must explicitly contain '确认' or 'confirm' and repeat the modification content. This must come from the user.");
+        }


The validation logic for user confirmation is weak and could be bypassed with minimal effort. The check only verifies that the input contains "确认" or "confirm" but doesn't validate that the user actually understood what they're confirming. A malicious actor or automated tool could easily provide a string that contains these words. Consider implementing a more robust confirmation mechanism, such as requiring the user to type the specific XID or operation details they're confirming.

namingserver/src/main/java/org/apache/seata/namingserver/service/ConsoleLocalServiceImpl.java

console/src/main/java/org/apache/seata/mcp/tools/GlobalLockTools.java

namingserver/src/main/java/org/apache/seata/namingserver/service/ConsoleLocalServiceImpl.java

console/src/main/java/org/apache/seata/mcp/service/impl/ModifyConfirmServiceImpl.java

console/src/main/java/org/apache/seata/mcp/entity/vo/McpGlobalSessionVO.java

Copilot

Pull request overview

Copilot reviewed 30 out of 36 changed files in this pull request and generated 13 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

console/src/main/java/org/apache/seata/mcp/entity/vo/McpGlobalLockVO.java

console/src/main/java/org/apache/seata/mcp/service/impl/ConsoleRemoteServiceImpl.java

console/src/main/java/org/apache/seata/mcp/core/utils/DateUtils.java

console/src/main/java/org/apache/seata/mcp/service/impl/ConsoleRemoteServiceImpl.java

namingserver/src/main/java/org/apache/seata/namingserver/service/ConsoleLocalServiceImpl.java

console/src/main/java/org/apache/seata/mcp/tools/GlobalSessionTools.java

console/src/main/java/org/apache/seata/mcp/tools/GlobalLockTools.java

namingserver/src/main/java/org/apache/seata/namingserver/service/ConsoleLocalServiceImpl.java

…y the requesting TC

…ation on

Copilot

Pull request overview

Copilot reviewed 34 out of 40 changed files in this pull request and generated 13 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

console/src/main/java/org/apache/seata/mcp/entity/vo/McpBranchSessionVO.java

console/src/main/java/org/apache/seata/mcp/tools/NameSpaceTools.java

console/src/main/java/org/apache/seata/mcp/tools/GlobalLockTools.java

console/src/main/java/org/apache/seata/mcp/entity/vo/McpGlobalSessionVO.java

console/src/main/java/org/apache/seata/mcp/entity/dto/McpGlobalSessionParamDto.java

console/src/main/java/org/apache/seata/mcp/entity/param/McpGlobalAbnormalSessionParam.java

console/src/main/java/org/apache/seata/mcp/entity/vo/McpGlobalSessionVO.java

console/src/main/java/org/apache/seata/mcp/entity/vo/McpBranchSessionVO.java

console/src/main/java/org/apache/seata/mcp/service/impl/ConsoleRemoteServiceImpl.java

…ods and use one address again

Xb2555 added 14 commits December 23, 2025 23:00

optimize: add token to UsernamePasswordAuthenticationToken in order t…

b039f5a

…o get token easily

feature: implement remote call to TC interface

46fb2f1

feature: add the necessary tool classes to achieve parameter validati…

8b2236d

…on and structuring

feature: Implement the ModifyConfirm tool

a1f6e34

feature: Implement the GlobalSession tool

3b93078

feature: Implement the GlobalLock tool

e696577

feature: Implement the BranchSession tool

c884f09

optimize: spotless check

bb3e9f8

optimize: add namespace tool

222dc9e

optimize: change autowired to construct mode

e12af7b

optimize: remove required

d6168e4

optimize: spotless check

52b2b6d

optimize: add license

8907f00

optimize: add changes

1d899cc

funky-eyes requested a review from Copilot December 24, 2025 01:20

funky-eyes added this to the 2.6.0 milestone Dec 24, 2025

funky-eyes added type: feature Category issues or prs related to feature request. module/server server module labels Dec 24, 2025

Copilot started reviewing on behalf of funky-eyes December 24, 2025 01:20 View session

funky-eyes added module/console and removed module/server server module labels Dec 24, 2025

Copilot AI reviewed Dec 24, 2025

View reviewed changes

funky-eyes reviewed Dec 24, 2025

View reviewed changes

console/pom.xml Outdated Show resolved Hide resolved

console/src/main/java/org/apache/seata/mcp/service/impl/ConsoleRemoteServiceImpl.java Outdated Show resolved Hide resolved

Xb2555 added 6 commits December 24, 2025 11:42

optimize: move GlobalStatus and ServerTableColumnsName to common

704d461

optimize: move BranchSessionVO and GlobalSessionVO to common

90b36fc

optimize: move GlobalLockParam and GlobalSessionParam to common

eb8a189

optimize: remove seata-core dependency

1b18278

optimize: use the common class in common module instead

e6907a0

fix: fixed Json serialization issue

fee5ea7

Xb2555 added 5 commits December 25, 2025 14:15

optimize: rename to McpGlobalLockParam

c602c61

optimize: rename to McpGlobalSessionParam

7c6a064

optimize: change params names to Mcp

6beb2f5

optimize: change VO classes name to Mcp

bed50b4

optimize: add license

d867f75

funky-eyes requested a review from Copilot December 25, 2025 07:41

Copilot started reviewing on behalf of funky-eyes December 25, 2025 07:42 View session

Copilot AI reviewed Dec 25, 2025

View reviewed changes

Xb2555 added 5 commits December 25, 2025 16:06

optimize: change to namingSpaceUrl

6d68bd2

optimize: correct spelling mistakes

a68aab6

optimize: Logger is used to record exceptions

972f992

optimize: use HttpMethod origin equals method

6960fec

optimize: change branchSessionVOs to mcpBranchSessionVOs

8603082

funky-eyes requested a review from Copilot December 25, 2025 09:30

Copilot started reviewing on behalf of funky-eyes December 25, 2025 09:30 View session

Copilot AI reviewed Dec 25, 2025

View reviewed changes

Xb2555 added 5 commits December 25, 2025 19:47

optimize: remove useless set method

545df49

optimize: Define a ServiceCallException to wrap an exception thrown b…

da6b07b

…y the requesting TC

optimize: Remove the switch for MCP authentication and keep authentic…

9be1a0e

…ation on

fix: Fix incorrect logic about maximum query interval

b61de71

fix: add license

799ac5e

funky-eyes requested a review from Copilot December 26, 2025 01:33

Copilot started reviewing on behalf of funky-eyes December 26, 2025 01:34 View session

Copilot AI reviewed Dec 26, 2025

View reviewed changes

funky-eyes reviewed Dec 26, 2025

View reviewed changes

console/src/main/java/org/apache/seata/mcp/service/impl/ConsoleRemoteServiceImpl.java Outdated Show resolved Hide resolved

Xb2555 added 5 commits December 26, 2025 12:39

fix: change properties name

8c6644f

fix: Fixed case issues

1bf1e75

optimize: Implement multiple namingserver address configurations

7311661

optimize: Delete the namingserver multiple address configuration meth…

c22e229

…ods and use one address again

optimize: spotless check

bbee2f9

feature: add global and branch session and lock management MCP tools #7893

Are you sure you want to change the base?

feature: add global and branch session and lock management MCP tools #7893

Uh oh!

Conversation

Xb2555 commented Dec 23, 2025

Ⅰ. Describe what this PR did

Ⅱ. Does this pull request fix one issue?

Ⅲ. Why don't you add test cases (unit test/integration test)?

Ⅳ. Describe how to verify it

Ⅴ. Special notes for reviews

Uh oh!

codecov bot commented Dec 23, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI Dec 25, 2025

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

codecov bot commented Dec 23, 2025 •

edited

Loading