v0.1.4: SDK v2 framework adoption with RDAP 404 NotFound contracts

SDK v2 framework adoption with RDAP 404 NotFound contracts

• IP/ASN RDAP 404s now reject as NotFound (ip_not_found / asn_not_found) with recovery hints instead of surfacing as transient network errors and burning retries
• Framework @cyanheads/mcp-ts-core ^0.10.6 → ^0.12.3 brings SDK v2 wire behavior: strict tool inputs, error-envelope outputSchema, 2020-12 schema advertisement, protocol revision 2026-07-28 over HTTP, Retry-After honoring, Timeout classification
• Supply-chain install guard — 3-day release-age hold plus Socket scanner; Docker multi-arch restored via BUILDPLATFORM on Bun 1.4.0 images
• Repo hygiene: community health files, .gitattributes, plugin-manifest identity fixes, DoH provider docs corrected to NextDNS, TypeScript 7 / Biome 2.5.9 toolchain

CHANGELOG v0.1.4

v0.1.3: mcp-ts-core 0.10.6, ValidationError input codes

mcp-ts-core 0.10.6, ValidationError input codes

Adopts mcp-ts-core 0.10.6 (server identity fields, Docker healthcheck, MCPB bundle cleaner) and reclassifies input-validation failures to ValidationError.

Added:

• Server identity — createApp() name/title forwarded to SDK initialize + /.well-known/mcp.json
• Docker HEALTHCHECK on /healthz; APP_VERSION build arg → OCI image.version label

Changed:

• Input validation reclassified from InvalidParams (-32602) to ValidationError across all six tools (invalid_domain, invalid_asn, invalid_ip, private_range)
• bundle script strips dependency-shipped agent docs via scripts/clean-mcpb.ts
• .codex-plugin displayName unscoped to whois-mcp-server

Dependency bumps:

• @cyanheads/mcp-ts-core ^0.9.21 → ^0.10.6
• @types/node 25.9.2 → 25.9.3

53 tests pass; bun run devcheck clean.

v0.1.2: DoH fallback, recovery hints, description cleanup

DoH fallback, recovery hints, description cleanup

Patches four issues found during field-testing.

Fixed:

• DoH fallback switched from Google Public DNS to NextDNS (#1) — Google's terms restrict third-party relaying; NextDNS is terms-compliant, HTTP/1.1-compatible, and returns human-readable CAA data
• whois_lookup_domain: domain_not_found now populates data.recovery.hint so agents have a next step (#2)
• whois_get_dns / whois_lookup_domain / whois_check_availability: internal resolver routing details removed from descriptions (#3)
• whois_check_availability: dead rdap_no_coverage errors[] entry removed — no-coverage path returns data, never throws (#4)

Dependency bumps:

• @types/node ^25.9.1 → 25.9.2

53 tests pass; bun run devcheck clean.

v0.1.1: Initial public release — RDAP + DoH domain intelligence

Initial public release — RDAP + DoH domain intelligence

6 keyless MCP tools over RDAP (IANA bootstrap) and DNS-over-HTTPS (Cloudflare/Google fallback): domain registration lookup, availability check, DNS records, IP netblock, ASN resolution, and one-call domain dossier.

Added:

• whois_lookup_domain — RDAP domain record via IANA auto-bootstrap
• whois_check_availability — availability via RDAP 404 signal
• whois_get_dns — DNS records via DoH (A, AAAA, MX, TXT, NS, CNAME, SOA, CAA, PTR)
• whois_lookup_ip — IP/CIDR netblock, org, and abuse contact via RIR RDAP
• whois_lookup_asn — ASN to org/RIR via RIR RDAP
• whois_get_dossier — parallel domain triage (registration + DNS in one call)

Security:

• TXT record values are backtick-fenced in format() output to prevent prompt injection

51 tests pass; bun run devcheck clean.