Skip to content

MCP Trustcard v0.4.1

Choose a tag to compare

View all tags
@davidnichols-ops davidnichols-ops released this 17 Jul 22:11
· 58 commits to master since this release
v0.4.1
a11a1c1

MCP Trustcard v0.4.1

Two incremental improvements over v0.4.0.

What's new

1. Config-injection support (--env-file)
Servers that require API keys (Brave Search, Notion, Slack, Supabase) can now be scanned by injecting env vars from a .env file:

mcp-trustcard --env-file .env @modelcontextprotocol/server-brave-search
mcp-trustcard --env-file .env -- uv run my-mcp-server
mcp-trustcard scan --env-file .env @modelcontextprotocol/server-brave-search --save-manifest brave.json

The env vars are passed to the spawned server process, allowing the handshake to succeed when credentials are required. This closes the gap where 134/159 servers in the registry failed because they needed API keys.

2. SSE integration tests
4 new tests covering the SSE (Server-Sent Events) code path in mcp-http-proxy:

  • SSE initialize forwarding
  • SSE tools/list with unapproved tool stripping
  • SSE tools/call blocking for unapproved tools
  • SSE tools/call allowing for approved tools

Stats

  • 58 tests, all passing (was 49 in v0.4.0, +4 SSE tests, +5 env-file parsing tests)
  • 14 files in npm package, 32.8 kB packed
  • Zero dependencies — pure Node stdlib
Assets 2
Loading