@agentvalet/mcp-server 1.2.0 → 1.3.0

package/dist/index.js

@@ -43,7 +43,16 @@ process.stderr.write(`[mcp-server] config ok | agent=${AGENT_ID} | owner=${OWNER
 const server = new Server({ name: "agentvalet", version: "1.0.0" }, { capabilities: { tools: {} }, instructions: renderInstructions(undefined) });
 // The config + server bundle threaded into auth + handlers (see context.ts) —
 // keeps those modules free of globals.
-const ctx = { AGENT_ID, OWNER_ID, PROXY_URL, AGENT_PRIVATE_KEY_RAW, privateKey, server };
+const ctx = {
+    AGENT_ID,
+    OWNER_ID,
+    PROXY_URL,
+    AGENT_PRIVATE_KEY_RAW,
+    privateKey,
+    server,
+    OBSERVE_PLATFORM: process.env.OBSERVE_PLATFORM ?? "",
+    OBSERVE_CREDENTIAL: process.env.OBSERVE_CREDENTIAL ?? "",
+};
 // Boot-time platform fetch — primes the proxy connection and surfaces auth
 // failures in the stderr boot diagnostics. Best-effort and fire-and-forget so
 // it can NEVER delay the `initialize` response (a top-level await here used to

package/dist/tools/handlers.js

@@ -46,6 +46,44 @@ export async function handleUsePlatform(ctx, params, progressToken) {
     const gate = await requireCredentials(ctx);
     if (gate)
         return gate;
+    // Observe Mode: when a BYO credential is configured locally, route to the
+    // audit-only relay and attach the credential as a header (NEVER in the body —
+    // it must not enter model-visible tool args). Governed behaviour is unchanged
+    // when no observe credential is set.
+    //
+    // Platform-match guard: if OBSERVE_PLATFORM is set, only route to the observe
+    // relay when the requested platform matches — preventing BYO credential leakage
+    // to unrelated platforms. If OBSERVE_PLATFORM is empty, route observe for any
+    // platform (backwards-compat when only OBSERVE_CREDENTIAL is set).
+    const observePlatformMatch = ctx.OBSERVE_CREDENTIAL &&
+        (ctx.OBSERVE_PLATFORM === "" || ctx.OBSERVE_PLATFORM === params.platform);
+    if (observePlatformMatch) {
+        const observeBody = {
+            platform: params.platform,
+            endpoint: params.endpoint,
+            method: params.method,
+            action: params.scope,
+            ...(params.data !== undefined && { body: params.data }),
+        };
+        let response;
+        try {
+            // fetchWithAuth signs and attaches the AV agent JWT (Authorization: Bearer …).
+            // Content-Type: application/json is added by fetchWithAuth before spreading
+            // init.headers, so X-AV-Observe-Credential survives.
+            response = await fetchWithAuth(ctx, `${ctx.PROXY_URL}/v1/observe/actions`, {
+                method: "POST",
+                headers: { "X-AV-Observe-Credential": ctx.OBSERVE_CREDENTIAL },
+                body: JSON.stringify(observeBody),
+            });
+        }
+        catch (err) {
+            return errorContent(`Network error: ${err instanceof Error ? err.message : err}`);
+        }
+        const text = await response.text();
+        if (!response.ok)
+            return errorContent(`Proxy error ${response.status}: ${text}`);
+        return jsonContent(text);
+    }
     const requestBody = {
         platform: params.platform,
         endpoint: params.endpoint,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvalet/mcp-server",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "description": "AgentValet MCP server — lets AI agents call approved platforms via the AgentValet proxy",
   "type": "module",
   "main": "dist/index.js",