ironmcp/core (PHP)

A mistyped argument name should not get a confident answer to the wrong question. ironmcp makes an MCP tool refuse the undeclared argument with a recoverable error and enforce exactly the arguments it advertises — one guarantee, one conformance corpus, in Python, TypeScript, and PHP.

This is a read-only mirror of the PHP kit for Packagist. The source of truth, the other language kits, and the full docs live in the monorepo: github.com/srclight/ironmcp (see kits/php/).

composer require ironmcp/core

The official PHP MCP SDK (mcp/sdk) validates tool arguments via Opis but leaves reflection schemas open, so an undeclared argument passes and is silently dropped. IronMcp\Harden::server() closes every tool's schema and refuses the unknown argument with a bounded, recoverable message — turning the SDK's own validator into an active guard. Same guarantee, same conformance corpus, as the Python and TypeScript kits.

use IronMcp\Harden;
use Mcp\Server;

$server = Harden::server(Server::builder()->setServerInfo('search', '1.0.0')->addTool([Tools::class, 'search']));
$server->run($transport); // an undeclared argument is now REFUSED, not dropped

See the spec and the conformance corpus (vendored here from the monorepo).