diff --git a/.gitignore b/.gitignore
index de9651b..1a3902c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,4 @@
 build/
 .xmake/
+# mcpp build artefacts
+target/
diff --git a/mcpp.lock b/mcpp.lock
new file mode 100644
index 0000000..cd8f6ed
--- /dev/null
+++ b/mcpp.lock
@@ -0,0 +1,8 @@
+# Auto-generated by mcpp. Do not edit by hand.
+version = 1
+
+[package."mbedtls"]
+version = "3.6.1"
+source  = "mcpp-index+https://github.com/mcpp-community/mcpp-index.git"
+hash    = "sha256:<from-xlings>"
+
diff --git a/mcpp.toml b/mcpp.toml
new file mode 100644
index 0000000..d8c8ba7
--- /dev/null
+++ b/mcpp.toml
@@ -0,0 +1,27 @@
+[package]
+name        = "mcpplibs.tinyhttps"
+version     = "0.2.0"
+description = "Minimal C++23 HTTP/HTTPS client with SSE streaming support"
+license     = "Apache-2.0"
+repo        = "https://github.com/mcpplibs/tinyhttps"
+
+[language]
+standard   = "c++23"
+modules    = true
+import_std = true
+
+[modules]
+sources = ["src/**/*.cppm"]
+exports = ["mcpplibs.tinyhttps"]
+
+[targets.tinyhttps]
+kind = "lib"
+
+# mbedtls is the only runtime dep. xmake.lua used `add_packages("mbedtls", { public = true })`;
+# the mcpp build picks up mbedtls's headers + libmbedtls.a transparently.
+[dependencies]
+mbedtls = "3.6.1"
+
+# `mcpp test` resolves these and discovers tests/**/*.cpp automatically.
+[dev-dependencies]
+gtest = "1.15.2"