@aipermission/mcp 0.1.7 → 0.1.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -101,7 +101,7 @@ These instructions teach the agent how to poll `approval_pending` and `running`
101
101
 
102
102
  ## Security Boundary
103
103
 
104
- This package talks to a local AIPermission gateway. `AIPERMISSION_API_URL` must point to `localhost`, `127.0.0.1`, or `[::1]`; remote URLs are rejected before the bearer token is sent. Do not expose the gateway on LAN or the public internet, and do not use it as a shared DevOps service. Tokens grant access only to the servers and execution rules configured in the gateway UI.
104
+ This package talks to a local AIPermission gateway. `AIPERMISSION_API_URL` must point to `localhost`, `127.0.0.1`, or `[::1]`; remote URLs are rejected before the bearer token is sent. Do not expose the gateway on LAN or the public internet, and do not use it as a shared DevOps service. Tokens grant access only to the servers and execution rules configured in the gateway UI. Token/server permissions may be temporary; expired grants are omitted from `list_servers` and no longer authorize command, console, or file-transfer tools.
105
105
 
106
106
  ## License
107
107
 
@@ -18,11 +18,14 @@ AIPermission is not a general DevOps control plane. Treat it as a temporary, sco
18
18
  Before executing commands:
19
19
 
20
20
  1. Call `list_servers()`.
21
- 2. Read each server's `name`, `id`, `execution_rule`, and `hints`.
21
+ 2. Read each server's `name`, `id`, `execution_rule`, optional `expires_at`,
22
+ and `hints`.
22
23
  3. Use the numeric `id` returned by the tool.
23
24
  4. Pick the narrowest server set that can answer the task.
24
25
 
25
26
  If no server is visible, say that the current token has no accessible servers.
27
+ If `expires_at` is present, treat access as temporary. Finish within that
28
+ maintenance window or ask the operator to extend access.
26
29
 
27
30
  ## Command Reasons
28
31
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@aipermission/mcp",
3
- "version": "0.1.7",
3
+ "version": "0.1.8",
4
4
  "mcpName": "io.github.aipermission/aipermission-mcp",
5
5
  "description": "Local-first MCP bridge for the aipermission gateway.",
6
6
  "license": "MIT",
package/server.json CHANGED
@@ -3,12 +3,12 @@
3
3
  "name": "io.github.aipermission/aipermission-mcp",
4
4
  "title": "AIPermission",
5
5
  "description": "Local-first MCP bridge for the AIPermission gateway.",
6
- "version": "0.1.7",
6
+ "version": "0.1.8",
7
7
  "packages": [
8
8
  {
9
9
  "registryType": "npm",
10
10
  "identifier": "@aipermission/mcp",
11
- "version": "0.1.7",
11
+ "version": "0.1.8",
12
12
  "transport": {
13
13
  "type": "stdio"
14
14
  }