SAP MCP 0.9.22 — Agent Friction Elimination + Security Hardening
What's New
Agent Friction Elimination
- signerProfile per-call — sign with any profile without switching .active-profile
- sap_build_sol_transfer + sap_build_spl_transfer — hosted unsigned builders for native SOL and SPL transfers
- Bridge cache coherence — sap_payments_profile_current re-reads on every call, no stale signer
- Better agent guidance — sap_quick_context nextAction includes explicit routing rules
Security Hardening
- x402 idempotency cache — prevents double-charge on retry (5min TTL, LRU)
- x402 nonce + TTL strict — challenge lifetime capped at 120s
- Challenge-signature on profile switch — prevents impersonation via file edits
- 0 vulnerabilities (pnpm audit clean)
Premium Provider Reliability
- 3 new free meme providers (DexScreener + Solana RPC, no API keys):
- meme.newlisting.alert, meme.rugpull.detector, meme.social.sentiment
- Multi-feed Pyth (5 feeds: SOL, WBTC, WETH, JUP, USDC) via HTTP polling
- ATR-based SL/TP with minSpreadPct filter, action: swap for spot
- signalConfidence normalized 0-1 on price tick events
- Provider preload at startup — providerHealth populated immediately
Pricing
- All 13 premium capability prices halved
- Heavy value-action: $0.15 → $0.05
- Auto-pay threshold: $0.02 → $0.05
- Premium poll/flush/metrics: FREE
Stats
- Tools: 317 → 319
- Tests: 603 (all passing)
- Type errors: 0
- Lint errors: 0
- Vulnerabilities: 0
Full changelog: https://github.com/OOBE-PROTOCOL/sap-mcp/blob/main/CHANGELOG.md