Safeguard MCP Server 0.3.0

Changes:

• 216d885 Merge pull request #35 from DanPeterson/danpeterson-reduce-mcp-tool-errors
• 6af27d5 Assert count=true via meta.count in integration tests
• f7c43db Bump semanticVersion to 0.3.0 for next release [ #36 ]
• f1a56ad Merge remote-tracking branch 'origin/main' into pr/35/danpeterson-reduce-mcp-tool-errors
• b2c4c84 Key schema-consultation memory by MCP session id
• 246798c Bump semanticVersion to 0.2.1 for post-0.2.0 dev builds (#36)
• 69510d5 Bump the npm-root-minor-patch group in /npm/safeguard-mcp with 3 updates (#33)
• 380ee9f Bump the nuget-minor-patch group with 3 updates (#34)
• 5b3aee9 Reduce Safeguard_Execute error rate with schema-aware guidance
• 93bf09b Merge pull request #32 from OneIdentity/docs/tls-and-host-guidance

See More

• d121630 Merge pull request #26 from OneIdentity/dependabot/nuget/tests/SafeguardMcp.IntegrationTests/nuget-minor-patch-feb11d2858
• 5e18f24 Lead README config examples with full server blocks and TLS-on defaults
• d0f38f9 Bump the nuget-minor-patch group with 1 update

This list of changes was auto generated.

Safeguard MCP Server 0.2.0

Changes:

• 60910a9 Merge pull request #31 from OneIdentity/fix/prerelease-publish-safety
• 74b340d Keep latest channels on GA when publishing pre-release tags
• db2793a Merge pull request #30 from OneIdentity/feature/audit-endpoint-reliability
• d0ac1d3 Trim Safeguard_Execute query description and clear nullable warning
• df2ea59 Surface count=true result in meta.count instead of overloading data
• 17865ce Surface audit-log query field guidance before the call
• d2e0910 Default audit logs to newest-first ordering
• c68c47c Disambiguate empty audit-log results with an effective-filter/window notice
• e244139 Cover query-option guard wiring with a CallToolRequestParams seam
• e7d0a69 Reject misplaced query options in Safeguard_Execute

This list of changes was auto generated.

Safeguard MCP Server 0.2.0-rc.1

Changes:

• 60910a9 Merge pull request #31 from OneIdentity/fix/prerelease-publish-safety
• 74b340d Keep latest channels on GA when publishing pre-release tags
• db2793a Merge pull request #30 from OneIdentity/feature/audit-endpoint-reliability
• d0ac1d3 Trim Safeguard_Execute query description and clear nullable warning
• df2ea59 Surface count=true result in meta.count instead of overloading data
• 17865ce Surface audit-log query field guidance before the call
• d2e0910 Default audit logs to newest-first ordering
• c68c47c Disambiguate empty audit-log results with an effective-filter/window notice
• e244139 Cover query-option guard wiring with a CallToolRequestParams seam
• e7d0a69 Reject misplaced query options in Safeguard_Execute

This list of changes was auto generated.

Safeguard MCP Server 0.1.0

v0.1.0

v0.1.0: first GA release

Safeguard MCP Server 0.0.1-rc.8

Changes:

• 27a2eef Merge pull request #29 from OneIdentity/fix/quiet-node-task-log-noise
• 1d309be ci: quiet Node task log noise (IPv6 ENETUNREACH, url.parse deprecation)

This list of changes was auto generated.

Safeguard MCP Server 0.0.1-rc.7

Changes:

• 28a0960 Merge pull request #28 from OneIdentity/add/static-cosign-pub
• cd0ba1e ci: commit static cosign public key and verify it in release

This list of changes was auto generated.

Safeguard MCP Server 0.0.1-rc.6

Changes:

• 6a3ac34 Merge pull request #27 from OneIdentity/fix/sbom-single-platform-template
• 926bfd4 ci: fix single-platform SBOM extraction in release job
• a7ed2d4 Merge pull request #25 from OneIdentity/fix-npm-sig-propagation
• 7007fd6 ci: widen npm signature-verify retry budget for registry propagation

This list of changes was auto generated.

Safeguard MCP Server 0.0.1-rc.4

Changes:

• c1f7f34 Merge pull request #24 from OneIdentity/fix-github-release-connection
• c3d6943 Create GitHub Release via OneIdentity GitHub App connection
• ca1d518 Verify published npm package signatures post-publish
• 8b50487 Merge pull request #23 from OneIdentity/switch-image-to-dockerhub
• 05091fe Add npm, Docker Hub, and license badges to README
• 8ebd895 Publish container image to Docker Hub instead of GHCR
• eead89d Merge pull request #22 from OneIdentity/fix/docker-smoke-safeguard-host
• 7b70240 Fix Release docker smoke: set SAFEGUARD_HOST for --http container
• c04a83c Merge pull request #21 from OneIdentity/fix/osx-apple-cert-reprotect
• 2160466 Fix osx-arm64 signing: re-protect Apple cert before keychain import

See More

• 3f1efab Merge pull request #20 from OneIdentity/fix/win-x64-signtool-x86-thumbprint
• 0b1d081 Fix win-x64 signing: use x86 signtool and /sha1 thumbprint matching
• 8e50e4f Merge pull request #19 from OneIdentity/fix/stdio-smoke-flush-race
• c4166cf Fix stdio smoke race: hold stdin open so server flushes responses
• 098652c Merge pull request #18 from OneIdentity/fix/drop-linux-arm64
• 8ab9f75 Drop linux-arm64 from the release matrix
• 728e1dd Merge pull request #17 from OneIdentity/fix/publish-tag-only
• 4d1d4b8 Make all registry publishing tag-only
• 016fc83 Merge pull request #16 from OneIdentity/fix/npm-publish-isrelease-gate
• 06e79c6 Fix golden drift: pin chart to LF and regenerate checksum
• d9b74b7 Validate deploy manifests with kubeconform instead of kubectl
• 5e986e4 Gate npm publish steps on isRelease
• 23ff9f2 Set version 0.1.0
• 2142c70 Merge pull request #15 from OneIdentity/bugfix/cleanup-test-garbage
• d093009 All sorts of cleanup problems
• 3b95888 Merge pull request #14 from OneIdentity/feature/agent-skills-2
• 3aae503 Fix Suite4 password lifecycle test to use Safeguard_RetrieveCredential
• 65f5f4d Consolidate QueryHelp/Workflows/Enum into section-addressable Safeguard_Reference
• 34a8e2f Relocate cut tool guidance into common-patterns resource
• 46a7c5c Trim MCP tool descriptions to identity + safety pointers
• 4dcd59a Use http instead of https when creating winrm assets
• 7048ed4 Merge pull request #13 from OneIdentity/feature/mcp-triage-cont3
• 6bbcf75 docs: add appliance-diagnostics example and terminology row for uptime
• 297a21f errors: prioritize service-prefix directive over suggester in 404 hint
• 0945c75 execute: reject /service/{name}/ prefix at pre-flight; describe path contract
• b8925bb discover: require a narrower; alias query=search; add appliance diagnostic synonyms
• 81b5652 Merge pull request #11 from OneIdentity/dependabot/nuget/src/SafeguardMcp/nuget-minor-patch-011feaa46d
• d6ed0ca Merge pull request #12 from OneIdentity/feature/mcp-error-triage-cont2
• 9e0ae46 Soften RetrieveCredential audience-split docs to match MCP spec semantics
• bd8a0ce Fix Safeguard_RetrieveCredential to accept string access-request ids
• 310eec0 Correct tool count in README to match the registered tool surface
• 057fd0f Emit session_token_issued_offer_to_launch notice on InitializeSession
• cc8d6e5 Drop PendingReview-only gate in CloseAccessRequest planner
• 90e6c36 Align agent-visible bulk-ops docs with the renamed recipe
• 6c75f6c Make bulk asset/account operations discoverable, hint at 50104 blockers
• 4be9443 Safeguard_Discover: split compact and verbose modes with size guard
• 0e64f0b Suggest catalog paths and supported methods on 404/405
• af59dd0 Parse Safeguard error bodies via SafeguardDotNetException.Response
• 9ab917e Lead HTTP-mode auth-failure messages with MCP client OAuth flow
• af709e8 Remove redundant Safeguard_Status tool
• b5d9bb4 Surface specific guidance when device-code grant is disabled
• 9901970 Stop disposing the SDK-owned access-token SecureString
• 15c37aa Bump the nuget-minor-patch group with 3 updates
• 26f69c2 Merge pull request #10 from OneIdentity/feature/mcp-error-triage-cont
• 80fed09 Remove internal-plan jargon from code comments and test fixtures
• 18cde3b Link to the MCP spec section that defines audience annotations
• 401573b Document Safeguard_CloseAccessRequest, Safeguard_RetrieveCredential, and the audience-split credential delivery contract
• 49be49d Add count and summarize workflow recipes
• f5ac730 Add recent-activity and partition-schedule recipes; broaden account-discovery
• 46c9004 Wait briefly for auto-approval in Safeguard_OpenAccessRequest
• 6514b19 Add Safeguard_RetrieveCredential tool with two-block audience-split response
• 773e801 Add Safeguard_CloseAccessRequest composite tool
• ee8cc07 Lock AccessRequest close-state dispatch table
• 4bc9f17 Drop OldValue/NewValue by default on ObjectChanges list routes
• 6f34a7f Remove the static catalog that is no longer needed
• 4f503b2 example for recommended approach
• 1b126bd Merge pull request #9 from OneIdentity/feature/mcp-error-triage
• 2730e8a Document agent-correctness techniques in the README
• 583a3d2 Fold PAM vocabulary into the access-request synonym group
• 8c80bcd Rename composite tool to Safeguard_OpenAccessRequest
• 1f0b253 Cross-link workflow recipes and composite tools from Discover and Execute
• b9bcf81 Add Safeguard_LaunchAccessRequest composite tool
• 6186d64 Rank workflow recipes ahead of raw endpoints in Safeguard_Discover
• 35b06fc Add 'did you mean' suggester for filter/orderby/fields errors
• 5312713 Update integration tests for response envelope
• d639b30 Add CSV output hygiene tests
• 0381fce Wire envelope into Safeguard_Execute and truncate at whole-record boundaries
• 72ee807 Add structured response envelope builder for Safeguard_Execute
• 264504b Fix bogus not_in operator in query syntax reference
• b71dc05 Surface dotted-path closure for entities through Safeguard_Schema
• 76114c6 Surface enum vocabularies from swagger and add Safeguard_Enum tool
• 26c202a Track readOnly handling per schema and surface write-endpoint responses
• a11b485 Surface per-parameter contract on discovered endpoints
• 6bf1774 Add error-trace replay eval suite under IntegrationTests
• b65d9a0 Merge pull request #8 from OneIdentity/feature/repo-and-docs
• 5c001f3 docs+stdio: add docs/CLIENT-SETUP.md, correct multi-appliance and SSL docs, add in-session TLS-trust elicitation for self-signed certs
• b3a14a6 doc quickstart and installation updates
• e08d8da Merge pull request #7 from OneIdentity/feature/authN-rework
• 053db64 CONTRIBUTING: refresh project tree and env-var table
• 583902f Rename docs/usage.md to docs/EXAMPLES.md and link from README
• ab8c743 README cleanup: tool count, logout fallback, security up front
• b394f35 Treat missing parent directory as input not found in logout
• a8df2b3 Document bearer token handling in README Threat Model
• 00f1b6c Add safeguard-mcp logout subcommand to pair with login
• d46fe09 Document BRIDGE_TRUST...