@1claw/mcp 0.52.0 → 0.53.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +5 -1
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -25,6 +25,10 @@ Set `MCP_TRANSPORT=httpStream` and `PORT=8080` to run in hosted mode.
|
|
|
25
25
|
|
|
26
26
|
**stdio and environment:** The server does **not** cache a single vault client for the whole process. Each tool invocation builds a `OneClawClient` from the **current** `process.env` (`ONECLAW_AGENT_API_KEY`, `ONECLAW_VAULT_ID`, etc.), so changing env vars (or vault binding) takes effect on the next call without restarting the MCP process.
|
|
27
27
|
|
|
28
|
+
**Agent environment auto-resolve (v0.52):** When an agent is tagged with `environment` and `env_auto_resolve: true`, the `resolve_env` tool can omit `environment` and the Vault API uses the agent's tag from the JWT. Org setting `env.enforce_agent_environment_scope` blocks agents from resolving vars outside their tagged environment.
|
|
29
|
+
|
|
30
|
+
**Policy engine v0.53:** Access policies support `policy_schema_version: 2` with expression-based `tx_conditions.expression` (mini DSL), expanded control-plane `action_kind_in` consensus triggers, and multi-chain deep decode (Solana, Bitcoin, Tron) for signing-time policy evaluation. TEE attestation is available at `GET https://shroud.1claw.xyz/v1/shroud/attestation`; audit chain verification at `GET /v1/audit/verify`.
|
|
31
|
+
|
|
28
32
|
## Installation (local / stdio)
|
|
29
33
|
|
|
30
34
|
### Homebrew (macOS / Linux)
|
|
@@ -72,7 +76,7 @@ pnpm run build
|
|
|
72
76
|
| `rotate_generate` | Server-side secret rotation with generated value (length, charset configurable) |
|
|
73
77
|
| `list_versions` | List all versions of a secret (version numbers, dates, disabled status) |
|
|
74
78
|
| `get_env_bundle` | Fetch an env_bundle secret and parse it as KEY=VALUE JSON |
|
|
75
|
-
| `resolve_env` | Resolve environment variables for a vault and environment (returns the final KEY=VALUE set with precedence applied) |
|
|
79
|
+
| `resolve_env` | Resolve environment variables for a vault and environment (returns the final KEY=VALUE set with precedence applied). When the agent has `env_auto_resolve: true`, omit `environment` and the server uses the agent's tagged environment from the JWT. |
|
|
76
80
|
| `create_vault` | Create a new vault (auto-shared with the agent's human creator) |
|
|
77
81
|
| `list_vaults` | List all vaults the agent can access (own + shared) |
|
|
78
82
|
| `grant_access` | Share a vault with a user or agent (own vaults only) |
|
package/package.json
CHANGED