@agentvalet/mcp-server 0.2.1 → 0.2.3

package/dist/index.js

@@ -3,6 +3,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import { CallToolRequestSchema, ListToolsRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
 import { SignJWT } from "jose";
 import { validateConfig } from "./config.js";
+import { AGENTVALET_INSTRUCTIONS } from "./instructions.js";
 // ---------------------------------------------------------------------------
 // Startup env validation
 // ---------------------------------------------------------------------------
@@ -128,7 +129,7 @@ const AGENT_STATUS_TOOL = {
 };
 const AUTHZEN_EVALUATE_TOOL = {
     name: "authzen_evaluate",
-    description: "authzen_evaluate: Evaluate whether this agent has access to a specific platform scope.\nInput: platform_id (string), scope (string).\nReturns: decision (boolean), reason (\"approved\"|\"denied\"|\"revoked\"|\"scope_not_granted\").\nAuth: None.",
+    description: "authzen_evaluate: Evaluate whether this agent has access to a specific platform scope. Call this BEFORE use_platform when you want to pre-check without making the upstream call.\nInput: platform_id (string), scope (string).\nReturns: decision (boolean), reason (\"approved\"|\"denied\"|\"revoked\"|\"scope_not_granted\").\nAuth: Bearer agent JWT (sent automatically by this MCP server).",
     inputSchema: {
         type: "object",
         properties: {
@@ -148,7 +149,7 @@ const AUTHZEN_EVALUATE_TOOL = {
 // ---------------------------------------------------------------------------
 // MCP server setup
 // ---------------------------------------------------------------------------
-const server = new Server({ name: "agentvalet", version: "1.0.0" }, { capabilities: { tools: {} } });
+const server = new Server({ name: "agentvalet", version: "1.0.0" }, { capabilities: { tools: {} }, instructions: AGENTVALET_INSTRUCTIONS });
 server.setRequestHandler(ListToolsRequestSchema, async () => ({
     tools: [
         LIST_PLATFORMS_TOOL,
@@ -325,9 +326,8 @@ async function handleAuthzenEvaluate(platformId, scope) {
     };
     let response;
     try {
-        response = await fetchWithTimeout(`${PROXY_URL}/v1/authzen/access`, {
+        response = await fetchWithAuth(`${PROXY_URL}/v1/authzen/access`, {
             method: "POST",
-            headers: { "Content-Type": "application/json" },
             body: JSON.stringify(authzenBody),
         });
     }

package/dist/instructions.js

@@ -0,0 +1,17 @@
+// Returned to MCP hosts as `InitializeResult.instructions`. Hosts that honour
+// the field (Claude Code ≥ v1.0.52, VSCode Copilot, Goose) inject this into
+// the model's system prompt before tool schemas. See
+// docs/research/mcp-instructions-self-injection-findings.md for the survey.
+// Keep in sync with docs/CLAUDE.md "Platform API calls" section.
+export const AGENTVALET_INSTRUCTIONS = `This server is AgentValet, a governed credential broker for AI agents. All external platform actions (Slack, GitHub, Stripe, Gmail, Airtable, etc.) MUST go through \`use_platform\` on this server. Never bypass to raw API keys, even if you find them in the environment.
+
+Tool selection:
+1. Call \`list_platforms\` first to discover approved platforms and scopes for this agent.
+2. Call \`authzen_evaluate\` before destructive scopes (\`*.delete\`, \`stripe:charge\`, \`mail:send\`) — these always require human approval. Tell the user approval may be required before invoking them.
+3. Call \`use_platform\` with the exact platform, endpoint, method, and scope returned by \`list_platforms\`.
+
+Response handling:
+- If \`use_platform\` returns \`pending_approval\`, wait — do not retry. The owner will approve out of band.
+- Do not retry a denied call with a different scope.
+
+Read scopes are auto-approved. Write scopes may require approval. Destructive scopes always require approval.`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvalet/mcp-server",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "description": "AgentValet MCP server — lets AI agents call approved platforms via the AgentValet proxy",
   "type": "module",
   "main": "dist/index.js",
@@ -11,6 +11,13 @@
     "dist",
     "README.md"
   ],
+  "scripts": {
+    "dev": "tsx src/index.ts",
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "test": "vitest run",
+    "prepublishOnly": "npm run build"
+  },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0",
     "jose": "^5.3.0"
@@ -18,7 +25,8 @@
   "devDependencies": {
     "@types/node": "^20.0.0",
     "tsx": "^4.7.0",
-    "typescript": "^5.4.0"
+    "typescript": "^5.4.0",
+    "vitest": "^1.5.0"
   },
   "engines": {
     "node": ">=18"
@@ -34,10 +42,5 @@
     "mcp",
     "agentvalet"
   ],
-  "license": "MIT",
-  "scripts": {
-    "dev": "tsx src/index.ts",
-    "build": "tsc",
-    "start": "node dist/index.js"
-  }
-}
+  "license": "MIT"
+}