Skip to content

v0.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 01 Sep 10:45
· 9 commits to main since this release
v0.1.0
This tag was signed with the committer’s verified signature.
ni-c Willi Thiel
GPG key ID: B97D5A9D95CC8EB2
Verified
Learn about vigilant mode.
46b9c85
This commit was signed with the committer’s verified signature.
ni-c Willi Thiel
GPG key ID: B97D5A9D95CC8EB2
Verified
Learn about vigilant mode.

First release. Extracted from the ALLOW_TOOLS/DENY_TOOLS implementation that
had been copied across seventeen MCP servers, where nine copies were byte-identical
and the rest differed only in additive modes.

Added

  • buildToolFilter — reads the two variables against a catalogue the server
    declares, and refuses an entry that names nothing rather than silently
    dropping a tool from tools/list.
  • installToolFilter — wraps registerTool, so registration code does not
    change and an unset filter costs nothing.
  • describeEntry — quotes a rejected entry back only while it is
    tool-name-shaped, so a credential pasted into the wrong compose line does not
    reach the client's log. The length limit is derived from the catalogue rather
    than configured; a hand-picked number would have redacted one server's own
    longest tool name.
  • The gate option, generalising READ_ONLY and ALLOW_SEND into one
    mechanism: the suppressed half stays in the catalogue, so a name from it is
    answered with "the gate suppresses it" rather than "no such tool".
Assets 2
Loading