@1claw/mcp 0.32.1 → 0.32.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -82,7 +82,7 @@ pnpm run build
82
82
  | `request_approval` | Request human approval for a policy change or sensitive action. Creates a pending approval for the agent's human operator. |
83
83
  | `list_approvals` | List approval requests, optionally filtered by status (pending, approved, denied). |
84
84
  | `get_approval` | Get the current status of a specific approval request. Useful for agents polling while waiting on approval. |
85
- | `lease_bankr_key` | Provision a short-lived Bankr wallet API key (`bk_usr_`) from the org's partner key. Returns lease ID, key, wallet, and expiry. Requires `BANKR_PARTNER_KEY` on Vault. |
85
+ | `lease_bankr_key` | **Privileged** policy-gated on `agents/{id}/bankr/*`. Provisions scoped `bk_usr_` key (stored for Shroud; **not returned** in tool output). Recommend TTL 300–900 s. Requires `BANKR_PARTNER_KEY` on Vault. |
86
86
  | `inspect_content` | Analyze arbitrary text for prompt injection, command injection, social engineering, PII, encoding tricks, and more. Works without vault credentials. |
87
87
 
88
88
  > **Treasury wallets** (`POST /v1/treasury/wallets/generate`, `GET .../wallets`, etc.) are human-only endpoints and are **not** exposed as MCP tools. Agents cannot generate or manage treasury wallets. Human users manage treasury wallets via the dashboard, CLI (`1claw treasury`), or SDK (`client.treasuryWallets`).
@@ -4,11 +4,11 @@ import { OneClawApiError } from "../client.js";
4
4
  export function leaseBankrKeyTool(client) {
5
5
  return {
6
6
  name: "lease_bankr_key",
7
- description: "Provision a short-lived Bankr wallet API key for an agent. The 1Claw vault holds the partner key and calls the Bankr Partner API to issue a scoped, time-limited key. Returns the ephemeral bk_usr_ key, wallet ID, and expiry.",
7
+ description: "Provision a short-lived Bankr wallet API key for an agent (privileged; requires explicit policy on agents/{id}/bankr/*). Partner key stays server-side; leased key is stored for Shroud never returned in tool output. Prefer ttl_seconds 300–900 for autonomous agents; revoke when done via list + revoke.",
8
8
  parameters: z.object({
9
9
  agent_id: z.string().optional().describe("Agent ID. Uses the current authenticated agent if omitted."),
10
10
  wallet_id: z.string().optional().describe("Bankr wallet ID (wlt_...). Uses org default if omitted."),
11
- ttl_seconds: z.number().optional().describe("Lease TTL in seconds (default 3600, max 86400)."),
11
+ ttl_seconds: z.number().optional().describe("Lease TTL in seconds (recommend 300–900 for agents; max 86400)."),
12
12
  llm_gateway_enabled: z.boolean().optional().describe("Enable LLM gateway access (default true)."),
13
13
  agent_api_enabled: z.boolean().optional().describe("Enable agent API access (default false)."),
14
14
  read_only: z.boolean().optional().describe("Read-only key (default true)."),
@@ -30,11 +30,11 @@ export function leaseBankrKeyTool(client) {
30
30
  });
31
31
  log.info(`Bankr key leased: ${result.lease_id}`);
32
32
  return [
33
- `Bankr key leased successfully`,
33
+ `Bankr key leased successfully.`,
34
34
  `Lease ID: ${result.lease_id}`,
35
- `API key: ${result.api_key}`,
36
35
  `Wallet: ${result.wallet_id}`,
37
36
  `Expires: ${result.expires_at}`,
37
+ `The bk_usr_ key is NOT included in this response (secret output). Use Shroud with X-Shroud-Provider: bankr, or revoke via lease ID when finished.`,
38
38
  ].join("\n");
39
39
  }
40
40
  catch (err) {
@@ -1 +1 @@
1
- {"version":3,"file":"lease_bankr_key.js","sourceRoot":"","sources":["../../src/tools/lease_bankr_key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAiB,eAAe,EAAE,MAAM,cAAc,CAAC;AAE9D,MAAM,UAAU,iBAAiB,CAAC,MAAqB;IACrD,OAAO;QACL,IAAI,EAAE,iBAA0B;QAChC,WAAW,EACT,iOAAiO;QACnO,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;YACnB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;YACtG,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yDAAyD,CAAC;YACpG,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;YAC9F,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;YACjG,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;YAC9F,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;SAC5E,CAAC;QACF,OAAO,EAAE,KAAK,EACZ,IAOC,EACD,EAAE,GAAG,EAA4C,EACjD,EAAE;YACF,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC;YAChD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,SAAS,CACjB,iGAAiG,CAClG,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE;oBACjD,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,WAAW,EAAE;wBACX,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,IAAI,IAAI;wBACrD,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,KAAK;wBAClD,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;qBAClC;iBACF,CAAC,CAAC;gBACH,GAAG,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAEjD,OAAO;oBACL,+BAA+B;oBAC/B,aAAa,MAAM,CAAC,QAAQ,EAAE;oBAC9B,YAAY,MAAM,CAAC,OAAO,EAAE;oBAC5B,WAAW,MAAM,CAAC,SAAS,EAAE;oBAC7B,YAAY,MAAM,CAAC,UAAU,EAAE;iBAChC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACf,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;oBACnC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;wBAAE,MAAM,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBACxD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;wBAAE,MAAM,IAAI,SAAS,CAAC,kBAAkB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC9E,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}
1
+ {"version":3,"file":"lease_bankr_key.js","sourceRoot":"","sources":["../../src/tools/lease_bankr_key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAiB,eAAe,EAAE,MAAM,cAAc,CAAC;AAE9D,MAAM,UAAU,iBAAiB,CAAC,MAAqB;IACrD,OAAO;QACL,IAAI,EAAE,iBAA0B;QAChC,WAAW,EACT,gTAAgT;QAClT,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;YACnB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;YACtG,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yDAAyD,CAAC;YACpG,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iEAAiE,CAAC;YAC9G,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;YACjG,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;YAC9F,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;SAC5E,CAAC;QACF,OAAO,EAAE,KAAK,EACZ,IAOC,EACD,EAAE,GAAG,EAA4C,EACjD,EAAE;YACF,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC;YAChD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,SAAS,CACjB,iGAAiG,CAClG,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE;oBACjD,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,WAAW,EAAE;wBACX,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,IAAI,IAAI;wBACrD,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,KAAK;wBAClD,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;qBAClC;iBACF,CAAC,CAAC;gBACH,GAAG,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAEjD,OAAO;oBACL,gCAAgC;oBAChC,aAAa,MAAM,CAAC,QAAQ,EAAE;oBAC9B,WAAW,MAAM,CAAC,SAAS,EAAE;oBAC7B,YAAY,MAAM,CAAC,UAAU,EAAE;oBAC/B,mJAAmJ;iBACpJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACf,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;oBACnC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;wBAAE,MAAM,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBACxD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;wBAAE,MAAM,IAAI,SAAS,CAAC,kBAAkB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC9E,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@1claw/mcp",
3
- "version": "0.32.1",
3
+ "version": "0.32.2",
4
4
  "mcpName": "io.github.1clawAI/1claw-mcp",
5
5
  "description": "MCP server for the 1claw secrets vault — lets AI agents fetch, store, and manage secrets at runtime",
6
6
  "type": "module",