request_body(content = Object, description = "MCP request payload", content_type = "application/json"),
    responses(
        (status = 404, description = "Not Found - MCP server is only available in enterprise edition", content_type = "application/json"),
    ),
    extensions(
        ("x-o2-ratelimit" = json!({"module": "mcp", "operation": "post"}))
    ),
)]
#[post("/{org_id}/mcp")]
pub async fn handle_mcp_post(
    _org_id: web::Path<String>,
    _body: web::Bytes,
) -> actix_web::Result<HttpResponse> {
    mcp_only_in_enterprise()
}

#[cfg(not(feature = "enterprise"))]
#[utoipa::path(
    context_path = "/api",
    tag = "MCP",
    operation_id = "MCPRequestStream",
    security(
        ("Authorization" = [])
    ),
    params(
        ("org_id" = String, Path, description = "Organization name"),
    ),
    request_body(content = Object, description = "MCP request payload", content_type = "application/json"),
    responses(
        (status = 404, description = "Not Found - MCP server is only available in enterprise edition", content_type = "application/json"),
    ),
    extensions(

    extensions(
        ("x-o2-ratelimit" = json!({"module": "mcp", "operation": "get"}))
    ),
)]
#[get("/{org_id}/mcp")]
pub async fn handle_mcp_get(
    _org_id: web::Path<String>,
    // This is `Bytes` because body in HTTP GET is not defined,
    // and actix-web tends to drop JSON body.
    // This is a workaround to prevent that.
    body: web::Bytes,
    req: HttpRequest,
) -> actix_web::Result<HttpResponse> {
    // Extract auth token from Authorization header
    let auth_token = req
        .headers()
        .get("Authorization")
        .and_then(|v| v.to_str().ok())
        .map(|s| s.to_string());

    // MCP Streamable HTTP: GET with empty body is optional
    // for server-initiated notifications. This is deprecated
    // and therefore not supported by O2
    if body.is_empty() {
        return Ok(HttpResponse::MethodNotAllowed()
            .insert_header(("Allow", "POST"))
            .json(serde_json::json!({
                "error": "GET requests must include a JSON-RPC request body. Use POST for standard requests."
            })));
    }

    // Parse JSON from body manually (GET with body is non-standard but MCP spec allows it)
    let mcp_request: MCPRequest = serde_json::from_slice(&body)
        .map_err(|e| actix_web::error::ErrorBadRequest(format!("Invalid JSON: {e}")))?;

    // Handle the request with streaming (returns SSE format)
    let stream = handle_mcp_request_stream(mcp_request, auth_token)
        .await
        .map_err(|e| actix_web::error::ErrorInternalServerError(format!("MCP error: {e}")))?;

    // Convert the stream error type to actix_web::Error
    let actix_stream = stream.map(|result| {
        result.map_err(|e| actix_web::error::ErrorInternalServerError(format!("Stream error: {e}")))
    });

    Ok(HttpResponse::Ok()
        .content_type("text/event-stream")
        .insert_header(("Cache-Control", "no-cache"))
        .insert_header(("X-Accel-Buffering", "no"))
        .streaming(actix_stream))
}

// Dummy handlers for non-enterprise builds
#[cfg(not(feature = "enterprise"))]
#[utoipa::path(
    context_path = "/api",
    tag = "MCP",
    operation_id = "MCPRequest",
    security(
        ("Authorization" = [])
    ),
    params(
        ("org_id" = String, Path, description = "Organization ID"),
    ),
    request_body(content = Object, description = "MCP request payload", content_type = "application/json"),
    responses(
        (status = 404, description = "Not Found - MCP server is only available in enterprise edition", content_type = "application/json"),
    ),
    extensions(
        ("x-o2-ratelimit" = json!({"module": "mcp", "operation": "post"}))
    ),
)]
#[post("/{org_id}/mcp")]
pub async fn handle_mcp_post(
    _org_id: web::Path<String>,
    _body: web::Bytes,
) -> actix_web::Result<HttpResponse> {
    mcp_only_in_enterprise()
}

#[cfg(not(feature = "enterprise"))]
#[utoipa::path(
    context_path = "/api",
    tag = "MCP",
    operation_id = "MCPRequestStream",
    security(
        ("Authorization" = [])
    ),
    params(
        ("org_id" = String, Path, description = "Organization name"),
    ),
    request_body(content = Object, description = "MCP request payload", content_type = "application/json"),
    responses(
        (status = 404, description = "Not Found - MCP server is only available in enterprise edition", content_type = "application/json"),
    ),
    extensions(
        ("x-o2-ratelimit" = json!({"module": "mcp", "operation": "get"}))
    ),

request::mcp::handle_mcp_post,
request::mcp::handle_mcp_get,
request::mcp::oauth_authorization_server_metadata,