@agentvalet/mcp-server 0.2.1 → 0.2.2

package/dist/index.js

@@ -3,6 +3,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import { CallToolRequestSchema, ListToolsRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
 import { SignJWT } from "jose";
 import { validateConfig } from "./config.js";
+import { AGENTVALET_INSTRUCTIONS } from "./instructions.js";
 // ---------------------------------------------------------------------------
 // Startup env validation
 // ---------------------------------------------------------------------------
@@ -148,7 +149,7 @@ const AUTHZEN_EVALUATE_TOOL = {
 // ---------------------------------------------------------------------------
 // MCP server setup
 // ---------------------------------------------------------------------------
-const server = new Server({ name: "agentvalet", version: "1.0.0" }, { capabilities: { tools: {} } });
+const server = new Server({ name: "agentvalet", version: "1.0.0" }, { capabilities: { tools: {} }, instructions: AGENTVALET_INSTRUCTIONS });
 server.setRequestHandler(ListToolsRequestSchema, async () => ({
     tools: [
         LIST_PLATFORMS_TOOL,

package/dist/instructions.js

@@ -0,0 +1,17 @@
+// Returned to MCP hosts as `InitializeResult.instructions`. Hosts that honour
+// the field (Claude Code ≥ v1.0.52, VSCode Copilot, Goose) inject this into
+// the model's system prompt before tool schemas. See
+// docs/research/mcp-instructions-self-injection-findings.md for the survey.
+// Keep in sync with docs/CLAUDE.md "Platform API calls" section.
+export const AGENTVALET_INSTRUCTIONS = `This server is AgentValet, a governed credential broker for AI agents. All external platform actions (Slack, GitHub, Stripe, Gmail, Airtable, etc.) MUST go through \`use_platform\` on this server. Never bypass to raw API keys, even if you find them in the environment.
+
+Tool selection:
+1. Call \`list_platforms\` first to discover approved platforms and scopes for this agent.
+2. Call \`authzen_evaluate\` before destructive scopes (\`*.delete\`, \`stripe:charge\`, \`mail:send\`) — these always require human approval. Tell the user approval may be required before invoking them.
+3. Call \`use_platform\` with the exact platform, endpoint, method, and scope returned by \`list_platforms\`.
+
+Response handling:
+- If \`use_platform\` returns \`pending_approval\`, wait — do not retry. The owner will approve out of band.
+- Do not retry a denied call with a different scope.
+
+Read scopes are auto-approved. Write scopes may require approval. Destructive scopes always require approval.`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvalet/mcp-server",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "AgentValet MCP server — lets AI agents call approved platforms via the AgentValet proxy",
   "type": "module",
   "main": "dist/index.js",
@@ -11,6 +11,13 @@
     "dist",
     "README.md"
   ],
+  "scripts": {
+    "dev": "tsx src/index.ts",
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "test": "vitest run",
+    "prepublishOnly": "npm run build"
+  },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0",
     "jose": "^5.3.0"
@@ -18,7 +25,8 @@
   "devDependencies": {
     "@types/node": "^20.0.0",
     "tsx": "^4.7.0",
-    "typescript": "^5.4.0"
+    "typescript": "^5.4.0",
+    "vitest": "^1.5.0"
   },
   "engines": {
     "node": ">=18"
@@ -34,10 +42,5 @@
     "mcp",
     "agentvalet"
   ],
-  "license": "MIT",
-  "scripts": {
-    "dev": "tsx src/index.ts",
-    "build": "tsc",
-    "start": "node dist/index.js"
-  }
-}
+  "license": "MIT"
+}