v0.8.0 — MCP server for AI coding agents

Added

MCP server (safeinstall mcp) — AI coding agents (Claude Code, Cursor, Windsurf, Cline) can now consult SafeInstall's full policy engine before suggesting or running any package install.

One tool: check_package — input a package name + optional version, get back a machine-readable verdict (allow or block) with reason codes, source repository, and age in hours. Backed by the same engine as the CLI — every check runs, including provenance continuity.

Without a project config file, the MCP server uses a secure preset: typo-squat detection and provenance continuity set to "block" (the agent use case wants maximum signal). When a config file is present, it is respected exactly.

Setup: one MCP config block + one agent rule snippet. See mcp/README.md for copy-paste configs for Claude Code, Cursor, and other MCP clients.

Full changelog: https://github.com/Mickdownunder/SafeInstall/blob/main/CHANGELOG.md