Repository navigation
·
1 commit
to main
since this release
The MCP loader's tool surface is now readable by directory scanners, and releases carry npm provenance. Covers the npm-only releases 1.1.1 + 1.1.2.
- Tool declarations are single-line in source AND in the published bundle — a post-build pass enforces it and fails the build on drift. MCP directories that read the tool surface statically now see
load_capsule/verify_capsule/list_trusted_keysinstead of "0 tools". - The server reports its real version, read from
package.jsonat runtime (was hardcoded at 1.0.0). - Releases are published from GitHub Actions with npm provenance attestations (OIDC trusted publishing) — the npm package links verifiably back to this repo, the workflow, and the exact commit.
src/ships in the npm package for auditability.
The CLI (altweb) remains at 1.1.0 — unchanged.
npm: https://www.npmjs.com/package/altweb-context