@aipermission/mcp 0.1.7 → 0.1.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md
CHANGED
|
@@ -101,7 +101,7 @@ These instructions teach the agent how to poll `approval_pending` and `running`
|
|
|
101
101
|
|
|
102
102
|
## Security Boundary
|
|
103
103
|
|
|
104
|
-
This package talks to a local AIPermission gateway. `AIPERMISSION_API_URL` must point to `localhost`, `127.0.0.1`, or `[::1]`; remote URLs are rejected before the bearer token is sent. Do not expose the gateway on LAN or the public internet, and do not use it as a shared DevOps service. Tokens grant access only to the servers and execution rules configured in the gateway UI.
|
|
104
|
+
This package talks to a local AIPermission gateway. `AIPERMISSION_API_URL` must point to `localhost`, `127.0.0.1`, or `[::1]`; remote URLs are rejected before the bearer token is sent. Do not expose the gateway on LAN or the public internet, and do not use it as a shared DevOps service. Tokens grant access only to the servers and execution rules configured in the gateway UI. Token/server permissions may be temporary; expired grants are omitted from `list_servers` and no longer authorize command, console, or file-transfer tools.
|
|
105
105
|
|
|
106
106
|
## License
|
|
107
107
|
|
|
@@ -18,11 +18,14 @@ AIPermission is not a general DevOps control plane. Treat it as a temporary, sco
|
|
|
18
18
|
Before executing commands:
|
|
19
19
|
|
|
20
20
|
1. Call `list_servers()`.
|
|
21
|
-
2. Read each server's `name`, `id`, `execution_rule`,
|
|
21
|
+
2. Read each server's `name`, `id`, `execution_rule`, optional `expires_at`,
|
|
22
|
+
and `hints`.
|
|
22
23
|
3. Use the numeric `id` returned by the tool.
|
|
23
24
|
4. Pick the narrowest server set that can answer the task.
|
|
24
25
|
|
|
25
26
|
If no server is visible, say that the current token has no accessible servers.
|
|
27
|
+
If `expires_at` is present, treat access as temporary. Finish within that
|
|
28
|
+
maintenance window or ask the operator to extend access.
|
|
26
29
|
|
|
27
30
|
## Command Reasons
|
|
28
31
|
|
package/package.json
CHANGED
package/server.json
CHANGED
|
@@ -3,12 +3,12 @@
|
|
|
3
3
|
"name": "io.github.aipermission/aipermission-mcp",
|
|
4
4
|
"title": "AIPermission",
|
|
5
5
|
"description": "Local-first MCP bridge for the AIPermission gateway.",
|
|
6
|
-
"version": "0.1.
|
|
6
|
+
"version": "0.1.8",
|
|
7
7
|
"packages": [
|
|
8
8
|
{
|
|
9
9
|
"registryType": "npm",
|
|
10
10
|
"identifier": "@aipermission/mcp",
|
|
11
|
-
"version": "0.1.
|
|
11
|
+
"version": "0.1.8",
|
|
12
12
|
"transport": {
|
|
13
13
|
"type": "stdio"
|
|
14
14
|
}
|