v0.9.7 — Security Hardening

v0.9.7 — Security Hardening

Endpoint: https://api.agent-module.dev/mcp (Streamable HTTP, JSON-RPC 2.0)

What's new

• Per-key rate limiting (200/hr, 1K/day, 10K/mo) with dynamic headers
• Trial IP abuse prevention (5 trials/IP/24hr, SHA-256 hashed)
• Stripe webhook idempotency (session_id dedup)
• Input sanitization (NFC normalization, 10KB POST guard)
• MCP auth gate (token required on authenticated tools)
• CORS tightened (DELETE removed globally, kept for /mcp)

Live stats

• 22 ethics modules (EU AI Act mapped)
• 7 MCP tools
• Free 24-hour trial: call get_trial_key via MCP

Quick start

{
  "mcpServers": {
    "agent-module": {
      "type": "streamable-http",
      "url": "https://api.agent-module.dev/mcp"
    }
  }
}