Skip to content

v0.1.8: mcp-ts-core ^0.10.6, truncation disclosure, server identity

Choose a tag to compare

View all tags
@cyanheads cyanheads released this 12 Jun 08:46
v0.1.8
This tag was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.
5ab0884
This commit was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.

mcp-ts-core ^0.10.6, truncation disclosure, server identity

Adopts @cyanheads/mcp-ts-core ^0.10.6 and surfaces result truncation to agents on the query tools.

Added:

  • socrata_query_dataset and socrata_dataframe_query: truncated/shown/cap enrichment when a result fills the row limit — guides paging, raising the limit, or querying the spilled canvas
  • createApp name/title set to socrata-mcp-server (served identity is the machine name, not the scoped npm package)
  • Dockerfile HEALTHCHECK and org.opencontainers.image.version label

Changed:

  • socrata_dataframe_query denies system-catalog references (information_schema, pg_catalog, sqlite_master, duckdb_*); sql_rejected recovery text documents it
  • lint:packaging gains bundle-content and identity guards; check-framework-antipatterns gains a z.coerce.boolean() env-flag rule
  • .mcpbignore patterns root-anchored; bundle runs clean-mcpb.ts to strip dependency-shipped agent docs

Dependency bumps:

  • @cyanheads/mcp-ts-core ^0.9.21 → ^0.10.6
  • @types/node ^25.9.1 → ^25.9.3
  • vitest ^4.1.7 → ^4.1.8

109 tests pass; bun run devcheck clean.

Assets 3
Loading