Skip to content

Baize MCP 0.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Aug 08:39
· 30 commits to main since this release
v0.1.0
c0038ee

Baize MCP 0.1.0

中文

Baize MCP 的首个可运行版本，让支持 MCP 的 AI 软件、IDE 和终端客户端通过 stdio 连接你自己的白泽实例，并在现有账号权限范围内读取经过隐私保护的服务器节点状态信息。

新增

  • 提供 baize_connection_status、baize_agents_list 和 baize_agent_get 三个只读工具，用于检查连接、分页查询节点以及读取单个节点的基础状态。
  • 提供本机交互式登录、会话检查、退出登录和多 profile 支持；AI 客户端配置只需保存可执行文件路径和 profile 名称。
  • 提供 Linux、macOS、Windows 的 amd64 与 arm64 发布包。

安全边界

  • 密码只从本机交互式终端读取，不进入命令参数或普通配置文件；用户名不会持久化，会话凭据由操作系统凭据存储保护。
  • 工具结果只返回节点 ID、显示名称、状态、操作系统、架构、Agent 版本和最后心跳时间，不返回连接地址、IP、指纹、能力清单、凭据或服务端追踪信息。
  • 当前工具均为只读、幂等、非破坏性工具；底层错误会转换为有限且不包含连接细节的提示。
  • 默认要求 HTTPS；本机回环地址可使用 HTTP，其它 HTTP 地址需要用户显式允许。
  • 发布包启动时会自动校验可执行文件 SHA-256；校验文件缺失或不匹配时不会继续运行。

安装与兼容性

  • 最低兼容版本为 Baize 0.2.1。
  • 请从本 Release 下载与你的系统和架构匹配的压缩包并完整解压；程序会自动执行启动自检，SHA256SUMS 仍可用于额外的发布文件校验。
  • 每个压缩包包含可执行文件、启动校验文件、版本文件、Apache-2.0 许可证、中英文说明和实际依赖的第三方许可证文本。

未来方向

当前版本只提供只读能力。后续计划在完成权限范围、明确确认、风险提示、审计和可回滚约束后，逐步增加受控写操作；具体能力以正式版本说明为准。

English

Baize MCP 0.1.0 is the first runnable release of the open-source MCP connector for Baize. It lets MCP-compatible AI applications, IDEs, and terminal clients connect to a user-managed Baize instance over stdio and read privacy-protected server status information within the signed-in user's existing permissions.

Added

  • Added three read-only tools: baize_connection_status, baize_agents_list, and baize_agent_get for connection checks, paginated agent queries, and basic status for one agent.
  • Added interactive local sign-in, session checks, sign-out, and multiple profiles. AI client configuration only needs the executable path and profile name.
  • Added amd64 and arm64 release archives for Linux, macOS, and Windows.

Security Boundary

  • Passwords are read only from an interactive local terminal and are never placed in command arguments or regular configuration files. Usernames are not persisted, and session credentials are protected by the operating system's credential store.
  • Tool results contain only the agent ID, display name, status, operating system, architecture, Agent version, and last heartbeat. Connection addresses, IP addresses, fingerprints, capability lists, credentials, and server trace information are excluded.
  • All current tools are read-only, idempotent, and non-destructive. Lower-level errors are converted into limited messages without connection details.
  • HTTPS is required by default. HTTP is accepted for loopback addresses; any other HTTP address requires explicit user approval.
  • Release archives automatically verify the executable SHA-256 at startup and refuse to run when the integrity file is missing or does not match.

Installation and Compatibility

  • The minimum compatible Baize version is 0.2.1.
  • Download and fully extract the archive for your operating system and architecture from this Release. Startup performs the integrity check automatically, while SHA256SUMS remains available for optional release-file verification.
  • Every archive includes the executable, startup integrity file, version file, Apache-2.0 license, Chinese and English guides, and the license texts for the dependencies included in the build.

Future Direction

This version is read-only. Future releases may add controlled write operations after permission scope, explicit confirmation, risk prompts, auditability, and rollback constraints are in place; formal release notes will define the actual scope.

Assets 11
Loading