Skip to content

SAP MCP 0.9.22 — Agent Friction Elimination + Security Hardening

Choose a tag to compare

@CryptoFamilyNFT CryptoFamilyNFT released this 25 Jul 14:03

What's New

Agent Friction Elimination

  • signerProfile per-call — sign with any profile without switching .active-profile
  • sap_build_sol_transfer + sap_build_spl_transfer — hosted unsigned builders for native SOL and SPL transfers
  • Bridge cache coherence — sap_payments_profile_current re-reads on every call, no stale signer
  • Better agent guidance — sap_quick_context nextAction includes explicit routing rules

Security Hardening

  • x402 idempotency cache — prevents double-charge on retry (5min TTL, LRU)
  • x402 nonce + TTL strict — challenge lifetime capped at 120s
  • Challenge-signature on profile switch — prevents impersonation via file edits
  • 0 vulnerabilities (pnpm audit clean)

Premium Provider Reliability

  • 3 new free meme providers (DexScreener + Solana RPC, no API keys):
    • meme.newlisting.alert, meme.rugpull.detector, meme.social.sentiment
  • Multi-feed Pyth (5 feeds: SOL, WBTC, WETH, JUP, USDC) via HTTP polling
  • ATR-based SL/TP with minSpreadPct filter, action: swap for spot
  • signalConfidence normalized 0-1 on price tick events
  • Provider preload at startup — providerHealth populated immediately

Pricing

  • All 13 premium capability prices halved
  • Heavy value-action: $0.15 → $0.05
  • Auto-pay threshold: $0.02 → $0.05
  • Premium poll/flush/metrics: FREE

Stats

  • Tools: 317 → 319
  • Tests: 603 (all passing)
  • Type errors: 0
  • Lint errors: 0
  • Vulnerabilities: 0

Full changelog: https://github.com/OOBE-PROTOCOL/sap-mcp/blob/main/CHANGELOG.md