v0.2.3 — accept PRUFA_API_KEY as token alias

The MCP server now honors PRUFA_API_KEY (env) and api_key (config) as aliases for the canonical PRUFA_API_TOKEN / api_token. Early integration docs and the CLI name the variable PRUFA_API_KEY; without this, such configs silently ran anonymous. PRUFA_API_TOKEN still wins when both are set.

v0.2.2 — token-free audit + free→workspace funnel

prufa_run_audit / prufa_get_report now run anonymously (no key, no card); a token, when set, just attributes the run and lifts the per-IP limit. Anonymous audit results carry a workspace_unlock block so an agent can convert its human to a free workspace (flows, monitors, discovery, gremlin).

v0.2.1 — report package version in serverInfo

Fixes serverInfo.version to report the prufa-mcp package version (was reporting the mcp SDK version). No functional change to the 44-tool surface.

v0.2.0 — complete agent surface (44 tools)

Expands prufa-mcp from 2 tools to the full Prufa product surface (44 tools) on the official MCP SDK: audits, flows, monitors, gremlin chaos runs, full-auto discovery, workspace + billing. Self-provisioning agent_temp workspace + agent-legible trial→paid conversion. See #11.

v0.1.4

Full Changelog: v0.1.0...v0.1.4

v0.1.0 — initial OSS wedge

The first public release of prufa-mcp — an Apache-2.0 MCP server that
audits your vibe-coded app for the things humans miss: tracking pixels,
broken flows, consent violations, console errors.

Install

pip install prufa-mcp

Get a free API key at https://prufa.dev — the first audit is free, no card required.

Then add to your .mcp.json (Claude Code, Cursor, Cline, Continue):

{
  "mcpServers": {
    "prufa": {
      "command": "prufa-mcp",
      "env": { "PRUFA_API_TOKEN": "your-prufa-api-key" }
    }
  }
}

What's in this release

• 2 free MCP tools (the OSS surface):
  • prufa_run_audit — trigger a public-page audit
  • prufa_get_report — fetch a shareable report
• Apache-2.0 license
• README with 30-second pitch, quickstart, examples, GitHub Action
• 3 runnable examples (Next.js, Vite SPA, Stripe-checkout)
• GitHub Action template (examples/prufa-scan.yml) for PR-time audits
• CONTRIBUTING.md
• CI workflow (Python 3.10 / 3.11 / 3.12) + Trusted Publishing workflow
• 3 seeded good first issue tickets

What's NOT in this release (yet)

• The other 13 MCP tools (stay hosted)
• The Playwright runner (stays hosted)
• The deterministic checks (stays hosted)
• The HTML report rendering (stays hosted)
• The demo GIF — coming in v0.2 once recorded

This is open core, hosted scale — same shape as
Stagehand (free) →
Browserbase (paid).

Links

• GitHub: https://github.com/prufa-dev/prufa-mcp
• PyPI: https://pypi.org/project/prufa-mcp/
• Hosted: https://prufa.dev
• Skill: https://github.com/prufa-dev/prufa-skill

Feedback

Open an issue, or DM @prufa_dev on X.