Clean up MCP/OpenAPI docs for 2.0.1 release; fix XML parse bug

- Fix unescaped '<' in BigDataH2Service services.xml mcpInputSchema
  ("<10MB" broke XML parsing on all containers)
- Replace generic placeholder service example with
  FinancialBenchmarkService in json-rpc-mcp-guide.xml
- Update inputSchema status from "not implemented" to "implemented"
  (mcpInputSchema in services.xml has been working since April)
- Convert all curl examples to HTTPS/HTTP2 on port 8443
  (Tomcat mTLS, WildFly self-signed cert, both ALPN h2 verified)
- Add container/JDK testing matrix (WildFly 32/39, Tomcat 11,
  OpenJDK 21/25 — all validated)
- Inline full test flow in WildFly README (was cross-ref to Tomcat)
- Add quick-start build/deploy/test instructions to mcp-examples.md
- Reference sample READMEs from main docs (mcp-architecture.md,
  json-rpc-mcp-guide.xml) for discoverability
- Remove stale Axis2/C next-steps (C1 complete, code committed)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: robertlazarski

modules/samples/userguide/src/userguide/springbootdemo-tomcat11/README.md

@@ -81,19 +81,30 @@ reason. Do not rename the directory before copying to `webapps/`.
 
 ## Test flow
 
-### 1. Verify OpenAPI docs
+All tests use **HTTPS/HTTP2 on port 8443** with mTLS client certificates. The Tomcat connector
+requires `certificateVerification="required"` — plain HTTP is not available.
+
+Set up the cert variables first:
+
+```bash
+CERTS=/path/to/axis-axis2-java-core/certs
+CURL_MTLS="curl -s --http2 --cert $CERTS/client.crt --key $CERTS/client.key --cacert $CERTS/ca.crt"
+```
+
+### 1. Verify OpenAPI and MCP endpoints
 
 ```bash
-curl http://localhost:8080/axis2-json-api/openapi.json
-curl http://localhost:8080/axis2-json-api/openapi.yaml
+$CURL_MTLS https://localhost:8443/axis2-json-api/openapi.json
+$CURL_MTLS https://localhost:8443/axis2-json-api/openapi.yaml
+$CURL_MTLS https://localhost:8443/axis2-json-api/openapi-mcp.json
 # Interactive UI:
-curl http://localhost:8080/axis2-json-api/swagger-ui
+$CURL_MTLS https://localhost:8443/axis2-json-api/swagger-ui
 ```
 
 ### 2. Login (get Bearer token)
 
 ```bash
-curl -s -X POST http://localhost:8080/axis2-json-api/services/loginService \
+$CURL_MTLS -X POST https://localhost:8443/axis2-json-api/services/loginService \
   -H 'Content-Type: application/json' \
   -d '{"doLogin":[{"arg0":{"email":"java-dev@axis.apache.org","credentials":"userguide"}}]}'
 ```
@@ -107,19 +118,19 @@ characters).
 
 ```bash
 TOKEN="<token from step 2>"
-curl -s -X POST http://localhost:8080/axis2-json-api/services/testws \
+$CURL_MTLS -X POST https://localhost:8443/axis2-json-api/services/testws \
   -H 'Content-Type: application/json' \
   -H "Authorization: Bearer $TOKEN" \
   -d '{"doTestws":[{"arg0":{"messagein":"hello world"}}]}'
 ```
 
 ### 4. Call BigData service
 
-`datasetSize` is in bytes. Size determines processing path: <10 MB → standard,
+`datasetSize` is in bytes. Size determines processing path: under 10 MB → standard,
 10–50 MB → multiplexing, >50 MB → streaming. Use at least 1 000 000 to get populated results.
 
 ```bash
-curl -s -X POST http://localhost:8080/axis2-json-api/services/BigDataH2Service \
+$CURL_MTLS -X POST https://localhost:8443/axis2-json-api/services/BigDataH2Service \
   -H 'Content-Type: application/json' \
   -H "Authorization: Bearer $TOKEN" \
   -d '{"processBigDataSet":[{"arg0":{"datasetId":"test-001","datasetSize":1000000,"processingMode":"streaming","enableMemoryOptimization":true,"analyticsType":"summary"}}]}'
@@ -132,19 +143,19 @@ Response includes `processedRecordCount`, `http2Optimized`, `memoryOptimized`, a
 
 ```bash
 # Portfolio variance — O(n²) covariance matrix
-curl -s -X POST http://localhost:8080/axis2-json-api/services/FinancialBenchmarkService \
+$CURL_MTLS -X POST https://localhost:8443/axis2-json-api/services/FinancialBenchmarkService \
   -H 'Content-Type: application/json' \
   -H "Authorization: Bearer $TOKEN" \
   -d '{"portfolioVariance":[{"arg0":{"nAssets":2,"weights":[0.6,0.4],"covarianceMatrix":[[0.04,0.006],[0.006,0.09]],"normalizeWeights":false,"nPeriodsPerYear":252}}]}'
 
 # Monte Carlo VaR — GBM simulation
-curl -s -X POST http://localhost:8080/axis2-json-api/services/FinancialBenchmarkService \
+$CURL_MTLS -X POST https://localhost:8443/axis2-json-api/services/FinancialBenchmarkService \
   -H 'Content-Type: application/json' \
   -H "Authorization: Bearer $TOKEN" \
   -d '{"monteCarlo":[{"arg0":{"nSimulations":10000,"nPeriods":252,"initialValue":100.0,"expectedReturn":0.08,"volatility":0.20,"nPeriodsPerYear":252,"randomSeed":42}}]}'
 
 # Scenario analysis — probability-weighted expected return
-curl -s -X POST http://localhost:8080/axis2-json-api/services/FinancialBenchmarkService \
+$CURL_MTLS -X POST https://localhost:8443/axis2-json-api/services/FinancialBenchmarkService \
   -H 'Content-Type: application/json' \
   -H "Authorization: Bearer $TOKEN" \
   -d '{"scenarioAnalysis":[{"arg0":{"assets":[{"assetId":1,"currentPrice":100.0,"positionSize":100,"scenarios":[{"price":120.0,"probability":0.3},{"price":100.0,"probability":0.5},{"price":75.0,"probability":0.2}]}],"useHashLookup":true,"probTolerance":0.001}}]}'

modules/samples/userguide/src/userguide/springbootdemo-tomcat11/resources-axis2/bigdata_h2_resources/services.xml

@@ -81,7 +81,7 @@
               "required": ["datasetId", "datasetSize"],
               "properties": {
                 "datasetId":   {"type": "string",  "description": "Unique dataset identifier for tracking"},
-                "datasetSize": {"type": "integer", "description": "Dataset size in bytes (determines processing mode: streaming for 50MB+, multiplexing for 10-50MB, standard for <10MB)"}
+                "datasetSize": {"type": "integer", "description": "Dataset size in bytes (determines processing mode: streaming for 50MB+, multiplexing for 10-50MB, standard for under 10MB)"}
               }
             }</parameter>
 

modules/samples/userguide/src/userguide/springbootdemo-wildfly/README.md

@@ -22,7 +22,7 @@
 Axis2 JSON-RPC services deployed as a WAR in **WildFly** (Undertow), using Spring Boot 3.x as
 a configuration framework only — there is no embedded container.
 
-Tested with: **WildFly 39.0.1.Final** · **OpenJDK 25** · **Spring Boot 3.4.3**
+Tested with: **WildFly 32.0.1.Final** (OpenJDK 21) · **WildFly 39.0.1.Final** (OpenJDK 25) · **Spring Boot 3.4.3**
 
 All Java source is shared from `../springbootdemo-tomcat11/src/main/java` via
 `build-helper-maven-plugin`. This module only adds WildFly-specific WEB-INF descriptors.
@@ -146,7 +146,77 @@ retried by a new WildFly instance — it must be removed.
 
 ## Test flow
 
-See `../springbootdemo-tomcat11/README.md` for the full curl-based test sequence; it applies
-identically to WildFly (same context path, same JSON-RPC format, same credentials).
+All tests use **HTTPS/HTTP2 on port 8443**. WildFly uses a self-signed certificate
+(`generate-self-signed-certificate-host="localhost"`), so `-k` is needed to skip
+certificate verification.
 
-The only difference: use port `8080` on WildFly (same default as Tomcat 11).
+```bash
+CURL_H2="curl -s --http2 -k"
+```
+
+### 1. Verify OpenAPI and MCP endpoints
+
+```bash
+$CURL_H2 https://localhost:8443/axis2-json-api/openapi.json
+$CURL_H2 https://localhost:8443/axis2-json-api/openapi.yaml
+$CURL_H2 https://localhost:8443/axis2-json-api/openapi-mcp.json
+# Interactive UI:
+$CURL_H2 https://localhost:8443/axis2-json-api/swagger-ui
+```
+
+### 2. Login (get Bearer token)
+
+```bash
+$CURL_H2 -X POST https://localhost:8443/axis2-json-api/services/loginService \
+  -H 'Content-Type: application/json' \
+  -d '{"doLogin":[{"arg0":{"email":"java-dev@axis.apache.org","credentials":"userguide"}}]}'
+```
+
+Response: `{"response":{"token":"<TOKEN>","uuid":"<UUID>","status":"OK"}}`
+
+### 3. Call protected service (testws)
+
+`messagein` must pass ESAPI `SafeString` validation (`[A-Za-z0-9.,\-_ ]*` — no `+` or special
+characters).
+
+```bash
+TOKEN="<token from step 2>"
+$CURL_H2 -X POST https://localhost:8443/axis2-json-api/services/testws \
+  -H 'Content-Type: application/json' \
+  -H "Authorization: Bearer $TOKEN" \
+  -d '{"doTestws":[{"arg0":{"messagein":"hello world"}}]}'
+```
+
+### 4. Call BigData service
+
+`datasetSize` is in bytes. Size determines processing path: under 10 MB → standard,
+10–50 MB → multiplexing, >50 MB → streaming. Use at least 1 000 000 to get populated results.
+
+```bash
+$CURL_H2 -X POST https://localhost:8443/axis2-json-api/services/BigDataH2Service \
+  -H 'Content-Type: application/json' \
+  -H "Authorization: Bearer $TOKEN" \
+  -d '{"processBigDataSet":[{"arg0":{"datasetId":"test-001","datasetSize":1000000,"processingMode":"streaming","enableMemoryOptimization":true,"analyticsType":"summary"}}]}'
+```
+
+### 5. Financial Benchmark Service
+
+```bash
+# Portfolio variance — O(n²) covariance matrix
+$CURL_H2 -X POST https://localhost:8443/axis2-json-api/services/FinancialBenchmarkService \
+  -H 'Content-Type: application/json' \
+  -H "Authorization: Bearer $TOKEN" \
+  -d '{"portfolioVariance":[{"arg0":{"nAssets":2,"weights":[0.6,0.4],"covarianceMatrix":[[0.04,0.006],[0.006,0.09]],"normalizeWeights":false,"nPeriodsPerYear":252}}]}'
+
+# Monte Carlo VaR — GBM simulation
+$CURL_H2 -X POST https://localhost:8443/axis2-json-api/services/FinancialBenchmarkService \
+  -H 'Content-Type: application/json' \
+  -H "Authorization: Bearer $TOKEN" \
+  -d '{"monteCarlo":[{"arg0":{"nSimulations":10000,"nPeriods":252,"initialValue":100.0,"expectedReturn":0.08,"volatility":0.20,"nPeriodsPerYear":252,"randomSeed":42}}]}'
+
+# Scenario analysis — probability-weighted expected return
+$CURL_H2 -X POST https://localhost:8443/axis2-json-api/services/FinancialBenchmarkService \
+  -H 'Content-Type: application/json' \
+  -H "Authorization: Bearer $TOKEN" \
+  -d '{"scenarioAnalysis":[{"arg0":{"assets":[{"assetId":1,"currentPrice":100.0,"positionSize":100,"scenarios":[{"price":120.0,"probability":0.3},{"price":100.0,"probability":0.5},{"price":75.0,"probability":0.2}]}],"useHashLookup":true,"probTolerance":0.001}}]}'
+```

src/site/markdown/docs/mcp-architecture.md

@@ -32,12 +32,16 @@ modelcontextprotocol.io.
 
 ### Reference implementations
 
+Build, deploy, and test instructions for each container are in the sample READMEs:
+- **Tomcat 11**: `modules/samples/userguide/src/userguide/springbootdemo-tomcat11/README.md`
+- **WildFly 32/39**: `modules/samples/userguide/src/userguide/springbootdemo-wildfly/README.md`
+
 ```
 springbootdemo-tomcat11 base URL: https://localhost:8443/axis2-json-api
   - LoginService      (auth, port 8080 only)
   - BigDataH2Service  (streaming/multiplexing demo, accessible via mTLS on 8443)
 
-springbootdemo-wildfly base URL: http://localhost:8080/axis2-json-api
+springbootdemo-wildfly base URL: https://localhost:8443/axis2-json-api
   - LoginService                (JWT auth)
   - FinancialBenchmarkService   (portfolioVariance, monteCarlo VaR, scenarioAnalysis)
   - BigDataH2Service            (HTTP/2 streaming)
@@ -330,12 +334,6 @@ opt-in per-operation.
 
 ## Next Steps
 
-### C1 — complete ✅
-
-`finbench_mcp.c` + `finbench_mcp_main.c` committed to `axis-axis2-c-core`.
-Builds with `build_financial_service.sh`; installs to `/usr/local/axis2c/bin/financial-benchmark-mcp`.
-See `docs/MCP.md` in the `axis-axis2-c-core` repo for the full C implementation plan.
-
 ### Track A remaining
 
 | Step | Work | Notes |
@@ -349,11 +347,16 @@ See `docs/MCP.md` in the `axis-axis2-c-core` repo for the full C implementation
 2. stdio transport first (B1) — validates JSON-RPC 2.0 ↔ MessageContext translation
 3. HTTP/SSE transport (B2) — reuses Axis2 HTTP infrastructure
 
-### Axis2/C deployment
+### Testing matrix
+
+MCP and OpenAPI support needs validation across the full container/JDK matrix:
 
-`build_financial_service.sh` in `axis-axis2-c-core` needs to be run on the target
-host after Axis2/C is installed. The service is committed and compiles clean — the
-script is the only remaining deployment step.
+| Container | JDK | MCP | OpenAPI | Status |
+|-----------|-----|-----|---------|--------|
+| WildFly 32 | OpenJDK 21 | ✅ | ✅ | Validated |
+| WildFly 39 | OpenJDK 25 | ✅ | ✅ | Validated |
+| Tomcat 11 | OpenJDK 21 | ✅ | ✅ | Validated |
+| Tomcat 11 | OpenJDK 25 | ✅ | ✅ | Validated |
 
 ---