status_mcp 0.1.0 → 0.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 90ebc8381fe57ee101567bd64e18bc376d891bedbfa5082e82588494390576b3
-  data.tar.gz: 7ac9f6100c97338d2e1db437baf9cd4a5c9c54170d449b76324a94c59f10fd81
+  metadata.gz: 9a0271e4490a1ed9fc6c565061e640d192db1c76dfcd2ab58b8928ff232acf95
+  data.tar.gz: c6dc17f1b39bd6642c2f637c404bcfa33ee71c6e83ea92b800b75e1835e61bb9
 SHA512:
-  metadata.gz: 3a080023fd1c648d0820ebbf1701689dc8fb7fff2e6bfcb371b7a75b8b38de92d76c4aa2c67c34309a2b672cd399f4315c08ab3d06b13411c6eb35a296ab9350
-  data.tar.gz: 10b97c76cea65e18588eff67c1874d3803113e5ca6c4559af0f35c72bbf389e1230a4caffec32c89e8df732ddc993d1fed98cfd9fcdec9121d599c6d87a6dde4
+  metadata.gz: 9d2fac4896efa144cbce6e096f8166aff1b5004eeb9f58d1b2ffc912b5d6191a6ac1fd2de3f771b25b160dd63d51ebe5da3d24ce0a10497a0fbc7248ffa225ba
+  data.tar.gz: 8f0a30f18e0a99c7371da9e0ad9425d24fad73c72a60988305d94b346551fff2fb0f97046ba1cf7781d94d9b396f51cfd30820a69e9c4b967aa1e716cb190319

data/CHANGELOG.md

@@ -1,5 +1,13 @@
 # CHANGELOG
 
+## 0.1.1 (2026-09-08)
+
+- Clamp `list_services` to 200 results and `fetch_status` extract length to 10000 characters
+- Bound `fetch_status` HTTP hops and wall clock, and cap HTTP bodies at 1MB before they fill memory
+- Fetch status pages live over HTTP; search, details, and list still use the bundled catalog
+- Raise the json floor to 2.21.2 and require patched nokogiri 1.19.4 and rack 3.2.6
+- Require Ruby 3.4, matching the gemspec and CI
+
 ## 0.1.0 (2025-11-26)
 
 - Initial release

data/README.md

@@ -1,6 +1,6 @@
 # status_mcp
 
-[![Gem Version](https://badge.fury.io/rb/status_mcp.svg)](https://badge.fury.io/rb/status_mcp) [![Test Status](https://github.com/amkisko/status_mcp.rb/actions/workflows/test.yml/badge.svg)](https://github.com/amkisko/status_mcp.rb/actions/workflows/test.yml) [![codecov](https://codecov.io/gh/amkisko/status_mcp.rb/graph/badge.svg)](https://codecov.io/gh/amkisko/status_mcp.rb)
+[![Gem Version](https://badge.fury.io/rb/status_mcp.svg)](https://badge.fury.io/rb/status_mcp) [![Test Status](https://github.com/amkisko/status_mcp.rb/actions/workflows/test.yml/badge.svg)](https://github.com/amkisko/status_mcp.rb/actions/workflows/test.yml) [![codecov](https://codecov.io/gh/amkisko/status_mcp.rb/graph/badge.svg)](https://app.codecov.io/github/amkisko/status_mcp.rb)
 
 Ruby gem providing status page information from [awesome-status](https://github.com/amkisko/awesome-status) via MCP (Model Context Protocol) server tools. Integrates with MCP-compatible clients like Cursor IDE, Claude Desktop, and other MCP-enabled tools.
 
@@ -10,9 +10,13 @@ Sponsored by [Kisko Labs](https://www.kiskolabs.com).
   <img src="kisko.svg" width="200" alt="Sponsored by Kisko Labs" />
 </a>
 
+## Status
+
+This project is in low-priority support / maintenance mode. Prefer [status-cli](https://github.com/amkisko/status-cli.rs) for new status-page CLI and automation work. Existing installs keep working; expect security and critical fixes only, not new features.
+
 ## Requirements
 
-- **Ruby 3.1 or higher** (Ruby 3.0 and earlier are not supported)
+- **Ruby 3.4 or higher**
 
 ## Quick Start
 
@@ -81,8 +85,8 @@ The server will start and communicate via STDIN/STDOUT using the MCP protocol.
 
 - **Status Page Information**: Access to over 1700 status page links from `awesome-status`
 - **MCP Server Integration**: Ready-to-use MCP server with tools for searching and retrieving status page details
-- **No Authentication Required**: All data is bundled with the gem
-- **Offline Capable**: Once installed, the data is available locally
+- **Bundled catalog**: Search, details, and list tools read local data from the gem
+- **Live fetch**: `fetch_status` requests the public status URL over HTTP
 
 ## MCP Tools
 
@@ -94,8 +98,11 @@ The MCP server provides the following tools:
 2. **get_service_details** - Get detailed status links for a specific service
    - Parameters: `name` (string)
 
-3. **list_services** - List all available services (limited to first 50 if too many)
-   - Parameters: `limit` (optional integer, default: 50)
+3. **list_services** - List available services
+   - Parameters: `limit` (optional integer, default: 50, maximum: 200)
+
+4. **fetch_status** - Fetch a public status page over HTTP and extract latest status, history, and messages
+   - Parameters: `status_url` (string), `max_length` (optional integer, default: 10000, maximum: 10000)
 
 ## Development
 
@@ -124,6 +131,19 @@ For more information, see [CONTRIBUTING.md](CONTRIBUTING.md).
 
 If you discover a security vulnerability, please report it responsibly. See [SECURITY.md](SECURITY.md) for details.
 
+## Links
+
+- [GitHub](https://github.com/amkisko/status_mcp.rb)
+- [GitLab](https://gitlab.com/amkisko/status_mcp.rb)
+- [RubyGems](https://rubygems.org/gems/status_mcp)
+- [Versions Atom](https://rubygems.org/gems/status_mcp/versions.atom) (feed id `10002864981316`)
+- [libraries.io](https://libraries.io/rubygems/status_mcp)
+- [Deps.dev](https://deps.dev/rubygems/status_mcp)
+- [SonarCloud](https://sonarcloud.io/project/overview?id=amkisko_status_mcp.rb)
+- [Snyk](https://snyk.io/test/github/amkisko/status_mcp.rb)
+- [Codecov](https://app.codecov.io/github/amkisko/status_mcp.rb)
+- [OpenSSF Scorecard](https://scorecard.dev/viewer/?uri=github.com/amkisko/status_mcp.rb)
+
 ## License
 
 The gem is available as open source under the terms of the [MIT License](https://opensource.org/licenses/MIT).

data/lib/status_mcp/fetch_budget.rb

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+module StatusMcp
+  class FetchBudget
+    class ExhaustedError < Error; end
+
+    def self.monotonic_now
+      Process.clock_gettime(Process::CLOCK_MONOTONIC)
+    end
+
+    def initialize(max_requests:, deadline_seconds:)
+      @remaining = max_requests
+      @deadline_at = self.class.monotonic_now + deadline_seconds
+    end
+
+    def consume!
+      raise ExhaustedError, "Fetch hop budget exceeded" if @remaining <= 0
+      if self.class.monotonic_now >= @deadline_at
+        raise ExhaustedError, "Fetch deadline exceeded"
+      end
+
+      @remaining -= 1
+    end
+  end
+end

data/lib/status_mcp/network_policy.rb

@@ -0,0 +1,55 @@
+# frozen_string_literal: true
+
+require "ipaddr"
+require "socket"
+require "uri"
+
+module StatusMcp
+  class NetworkPolicy
+    ALLOWED_SCHEMES = %w[http https].freeze
+    FORBIDDEN_RANGES = %w[
+      0.0.0.0/8 10.0.0.0/8 100.64.0.0/10 127.0.0.0/8
+      169.254.0.0/16 172.16.0.0/12 192.0.0.0/24 192.0.2.0/24
+      192.88.99.0/24 192.168.0.0/16 198.18.0.0/15 198.51.100.0/24
+      203.0.113.0/24 224.0.0.0/4 240.0.0.0/4
+      ::/128 ::1/128 64:ff9b::/96 100::/64 2001::/23 2002::/16
+      fc00::/7 fe80::/10 ff00::/8
+    ].map { |range| IPAddr.new(range) }.freeze
+
+    def self.validate!(url)
+      uri = URI.parse(url.to_s)
+      reject! unless ALLOWED_SCHEMES.include?(uri.scheme&.downcase)
+      reject! if uri.host.to_s.empty? || uri.userinfo
+
+      [uri, allowed_ip_address(uri)]
+    rescue URI::InvalidURIError
+      reject!
+    end
+
+    def self.allowed_ip_address(uri)
+      addresses = Addrinfo.getaddrinfo(uri.host, uri.port, nil, :STREAM)
+        .map(&:ip_address)
+        .uniq
+      reject! if addresses.empty? || addresses.any? { |address| forbidden?(address) }
+
+      addresses.first
+    rescue SocketError, SystemCallError
+      reject!
+    end
+    private_class_method :allowed_ip_address
+
+    def self.forbidden?(address)
+      parsed = IPAddr.new(address.split("%", 2).first)
+      parsed = parsed.native if parsed.ipv4_mapped?
+      FORBIDDEN_RANGES.any? { |range| range.include?(parsed) }
+    rescue IPAddr::InvalidAddressError
+      true
+    end
+    private_class_method :forbidden?
+
+    def self.reject!
+      raise UnsafeUrlError, "URL destination is not allowed"
+    end
+    private_class_method :reject!
+  end
+end

data/lib/status_mcp/server.rb

@@ -7,6 +7,8 @@ require "uri"
 require "openssl"
 require "nokogiri"
 require_relative "../status_mcp"
+require_relative "network_policy"
+require_relative "fetch_budget"
 
 module StatusMcp
   class Server
@@ -191,16 +193,18 @@ module StatusMcp
     end
 
     class ListServicesTool < BaseTool
+      MAX_LIST_LIMIT = 200
+
       tool_name "list_services"
-      description "List all available services (limited to first 50 if too many)"
+      description "List available services. Default 50. Maximum 200."
 
       arguments do
-        optional(:limit).filled(:integer).description("Limit number of results (default 50)")
+        optional(:limit).filled(:integer).description("Limit number of results (default 50, maximum 200)")
       end
 
       def call(limit: 50)
         services = load_data
-        limit ||= 50
+        limit = (limit || 50).clamp(1, MAX_LIST_LIMIT)
 
         list = services.take(limit).map { |s| s["name"] }
 
@@ -218,16 +222,27 @@ module StatusMcp
     class FetchStatusTool < BaseTool
       # Maximum response size (1MB) to protect against zip bombs and crawler protection pages
       MAX_RESPONSE_SIZE = 1 * 1024 * 1024 # 1MB
+      MAX_EXTRACT_LENGTH = 10_000
+      # Two common feed paths plus main, history, and a few redirects. Raise MAX_FETCH_REQUESTS if a vendor needs a longer hop chain.
+      MAX_FEED_PROBES = 2
+      MAX_FETCH_REQUESTS = 6
+      FETCH_DEADLINE_SECONDS = 20
 
       tool_name "fetch_status"
       description "Fetch status from a status_url with HTML purification. Extracts latest status, history, and messages from status pages."
 
       arguments do
         required(:status_url).filled(:string).description("Status page URL to fetch")
-        optional(:max_length).filled(:integer).description("Maximum length of extracted text in characters (default: 10000)")
+        optional(:max_length).filled(:integer).description("Maximum length of extracted text in characters (default: 10000, maximum: 10000)")
       end
 
       def call(status_url:, max_length: 10000)
+        max_length = (max_length || MAX_EXTRACT_LENGTH).clamp(1, MAX_EXTRACT_LENGTH)
+        @fetch_budget = StatusMcp::FetchBudget.new(
+          max_requests: MAX_FETCH_REQUESTS,
+          deadline_seconds: FETCH_DEADLINE_SECONDS
+        )
+
         # Try incident.io API first (only if we detect it's an incident.io page)
         api_info = nil
         api_url = nil
@@ -242,7 +257,11 @@ module StatusMcp
                 api_info = nil
               end
             end
-          rescue => e
+          rescue StatusMcp::UnsafeUrlError, StatusMcp::ResponseSizeExceededError
+            raise
+          rescue StatusMcp::FetchBudget::ExhaustedError
+            api_info = nil
+          rescue
             # Not an incident.io page or API failed, continue with other methods
           end
         end
@@ -259,8 +278,11 @@ module StatusMcp
               successful_feed_url = feed_url
               break
             end
-          rescue => e
-            # Try next feed URL
+          rescue StatusMcp::UnsafeUrlError, StatusMcp::ResponseSizeExceededError
+            raise
+          rescue StatusMcp::FetchBudget::ExhaustedError
+            break
+          rescue
             next
           end
         end
@@ -269,8 +291,11 @@ module StatusMcp
         main_info = nil
         begin
           main_info = fetch_and_extract(status_url, max_length)
-        rescue => e
-          # If we have feed info, that's okay
+        rescue StatusMcp::UnsafeUrlError, StatusMcp::ResponseSizeExceededError
+          raise
+        rescue StatusMcp::FetchBudget::ExhaustedError
+          main_info = {latest_status: nil, history: [], messages: [], error: nil} unless feed_info || api_info
+        rescue
           main_info = {latest_status: nil, history: [], messages: [], error: nil} unless feed_info
         end
 
@@ -281,9 +306,12 @@ module StatusMcp
         if history_url && history_url != status_url
           begin
             history_info = fetch_and_extract(history_url, max_length, history_only: true)
-          rescue => e
-            # Silently fail if history page doesn't exist or has errors
-            # This is expected for many status pages
+          rescue StatusMcp::UnsafeUrlError, StatusMcp::ResponseSizeExceededError
+            raise
+          rescue StatusMcp::FetchBudget::ExhaustedError
+            history_info = nil
+          rescue
+            # History page missing is common
           end
         end
 
@@ -348,6 +376,8 @@ module StatusMcp
       rescue => e
         error_message = if e.is_a?(StatusMcp::ResponseSizeExceededError)
           "Response size limit exceeded: #{e.message}"
+        elsif e.is_a?(StatusMcp::UnsafeUrlError)
+          e.message
         else
           "Error fetching status: #{e.message}"
         end
@@ -366,8 +396,11 @@ module StatusMcp
         redirect_count = 0
 
         while redirect_count < max_redirects
-          uri = URI(current_url)
+          @fetch_budget&.consume!
+
+          uri, ip_address = NetworkPolicy.validate!(current_url)
           http = Net::HTTP.new(uri.host, uri.port)
+          http.ipaddr = ip_address
           http.use_ssl = (uri.scheme == "https")
           if http.use_ssl?
             http.verify_mode = OpenSSL::SSL::VERIFY_PEER
@@ -380,43 +413,52 @@ module StatusMcp
           request["User-Agent"] = "Mozilla/5.0 (compatible; StatusMcp/1.0)"
           request["Accept"] = accept
 
-          response = http.request(request)
-
-          # Handle redirects (301, 302, 307, 308)
-          if response.is_a?(Net::HTTPRedirection) && response["location"]
-            redirect_count += 1
-            location = response["location"]
-            # Handle relative redirects
-            current_url = URI.join(current_url, location).to_s
-            next
-          end
-
-          # Check response size before returning (protect against zip bombs and crawler protection)
-          if response.is_a?(Net::HTTPSuccess)
-            # Check Content-Length header first if available (optimization to avoid reading large bodies)
-            content_length = response["Content-Length"]
-            if content_length
-              content_length_int = content_length.to_i
-              if content_length_int > MAX_RESPONSE_SIZE
-                raise StatusMcp::ResponseSizeExceededError.new(content_length_int, MAX_RESPONSE_SIZE, uri: uri.to_s)
-              end
-            end
-
-            # Read body and check actual size (Content-Length might be missing or incorrect)
-            response_body = response.body || ""
-            response_size = response_body.bytesize
-            if response_size > MAX_RESPONSE_SIZE
-              raise StatusMcp::ResponseSizeExceededError.new(response_size, MAX_RESPONSE_SIZE, uri: uri.to_s)
+          redirected = false
+          captured = nil
+          http.request(request) do |response|
+            if response.is_a?(Net::HTTPRedirection) && response["location"]
+              drain_body(response)
+              redirect_count += 1
+              current_url = URI.join(current_url, response["location"]).to_s
+              redirected = true
+            else
+              attach_capped_body!(response, uri)
+              captured = response
             end
           end
 
-          return response
+          next if redirected
+          return captured
         end
 
-        # Too many redirects
         raise "Too many redirects (max: #{max_redirects})"
       end
 
+      def drain_body(response)
+        response.read_body { |_| }
+      end
+
+      def attach_capped_body!(response, uri)
+        content_length = response["Content-Length"]
+        if content_length
+          content_length_int = content_length.to_i
+          if content_length_int > MAX_RESPONSE_SIZE
+            drain_body(response)
+            raise StatusMcp::ResponseSizeExceededError.new(content_length_int, MAX_RESPONSE_SIZE, uri: uri.to_s)
+          end
+        end
+
+        buffer = +""
+        response.read_body do |chunk|
+          next_size = buffer.bytesize + chunk.bytesize
+          if next_size > MAX_RESPONSE_SIZE
+            raise StatusMcp::ResponseSizeExceededError.new(next_size, MAX_RESPONSE_SIZE, uri: uri.to_s)
+          end
+          buffer << chunk
+        end
+        response.define_singleton_method(:body) { buffer }
+      end
+
       def fetch_and_extract(url, max_length, history_only: false)
         response = fetch_with_redirects(url)
         http_status_code = response.code.to_i
@@ -523,8 +565,7 @@ module StatusMcp
 
         # Parse JSON response
         parse_incident_io_api(json_body, max_length)
-      rescue StatusMcp::ResponseSizeExceededError
-        # Re-raise response size errors
+      rescue StatusMcp::ResponseSizeExceededError, StatusMcp::UnsafeUrlError, StatusMcp::FetchBudget::ExhaustedError
         raise
       rescue JSON::ParserError => e
         {
@@ -644,7 +685,7 @@ module StatusMcp
         uri = URI(status_url)
         base_path = uri.path.chomp("/")
 
-        # Common RSS/Atom feed patterns
+        # Common RSS/Atom feed patterns. MAX_FEED_PROBES is the known ceiling.
         feed_patterns = [
           "/feed.rss",
           "/feed.atom",
@@ -653,7 +694,7 @@ module StatusMcp
           "/feed",
           "/status.rss",
           "/status.atom"
-        ]
+        ].first(MAX_FEED_PROBES)
 
         feed_urls = []
         feed_patterns.each do |pattern|
@@ -686,8 +727,7 @@ module StatusMcp
 
         # Parse RSS/Atom feed
         parse_feed(feed_body, max_length)
-      rescue StatusMcp::ResponseSizeExceededError
-        # Re-raise response size errors
+      rescue StatusMcp::ResponseSizeExceededError, StatusMcp::UnsafeUrlError, StatusMcp::FetchBudget::ExhaustedError
         raise
       rescue => e
         {

data/lib/status_mcp/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module StatusMcp
-  VERSION = "0.1.0"
+  VERSION = "0.1.1"
 end

data/lib/status_mcp.rb

@@ -6,6 +6,7 @@ require_relative "status_mcp/version"
 
 module StatusMcp
   class Error < StandardError; end
+  class UnsafeUrlError < Error; end
 
   class ResponseSizeExceededError < Error
     attr_reader :size, :max_size, :uri

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: status_mcp
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.1
 platform: ruby
 authors:
 - Andrei Makarov
@@ -30,6 +30,9 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.18'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.19.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -37,6 +40,9 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.18'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.19.4
 - !ruby/object:Gem::Dependency
   name: rack
   requirement: !ruby/object:Gem::Requirement
@@ -44,6 +50,9 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '3.2'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 3.2.6
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -51,6 +60,9 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '3.2'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 3.2.6
 - !ruby/object:Gem::Dependency
   name: base64
   requirement: !ruby/object:Gem::Requirement
@@ -65,6 +77,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '0.3'
+- !ruby/object:Gem::Dependency
+  name: json
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.21.2
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.21.2
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
@@ -79,6 +105,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '3.13'
+- !ruby/object:Gem::Dependency
+  name: polyrun
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.2.0
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.2.0
 - !ruby/object:Gem::Dependency
   name: webmock
   requirement: !ruby/object:Gem::Requirement
@@ -100,6 +140,9 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '6.3'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 6.4.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -107,6 +150,9 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '6.3'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 6.4.0
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
@@ -177,6 +223,76 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.52'
+- !ruby/object:Gem::Dependency
+  name: standard-custom
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+- !ruby/object:Gem::Dependency
+  name: standard-performance
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.8'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.8'
+- !ruby/object:Gem::Dependency
+  name: standard-rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.3'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.3'
+- !ruby/object:Gem::Dependency
+  name: rubocop-rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.8'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.8'
+- !ruby/object:Gem::Dependency
+  name: rubocop-thread_safety
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.7'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.7'
 - !ruby/object:Gem::Dependency
   name: appraisal
   requirement: !ruby/object:Gem::Requirement
@@ -234,6 +350,8 @@ files:
 - assets/data.json
 - bin/status_mcp
 - lib/status_mcp.rb
+- lib/status_mcp/fetch_budget.rb
+- lib/status_mcp/network_policy.rb
 - lib/status_mcp/server.rb
 - lib/status_mcp/version.rb
 homepage: https://github.com/amkisko/status_mcp.rb
@@ -247,14 +365,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '3.1'
+      version: '3.4'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.9
+rubygems_version: 4.0.6
 specification_version: 4
 summary: Status MCP (Model Context Protocol) server for status page information
 test_files: []