@aipermission/mcp 0.2.10 → 0.2.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -151,6 +151,30 @@ explicitly supports that behavior.
151
151
  MCP connector responses never include file contents, gateway temp paths, archive
152
152
  staging paths, or local upload contents.
153
153
 
154
+ ## S3/Object Storage Practice
155
+
156
+ For S3 connector targets, discover actions with `get_connector_actions` and
157
+ prefer this sequence:
158
+
159
+ 1. Use `bucket_info` only to verify bucket reachability or endpoint metadata.
160
+ 2. Use `list_objects` to browse. Pass `prefix` to enter a folder-like prefix,
161
+ and use `browse_input` from directory entries when it is returned.
162
+ 3. Use `cursor` from `next_cursor` or `next_page_input` for pagination. Do not
163
+ send fields named `continuation_token`; S3 pagination tokens are not
164
+ credentials here, but the connector exposes them as `cursor` to avoid
165
+ secret-like input names.
166
+ 4. Use `get_object_metadata` before `download_object` when you only need size,
167
+ type, headers, or existence.
168
+ 5. Use `download_object` only for bounded object reads explicitly requested by
169
+ the operator.
170
+ 6. Keep `overwrite=false` for `upload_object` and `rename_object` unless the
171
+ operator explicitly approved replacement.
172
+ 7. Treat `delete_object` as destructive and ask for explicit confirmation if
173
+ approval mode does not already provide it.
174
+
175
+ Object content may contain secrets or customer data. Avoid downloading or
176
+ echoing object contents unless the operator asked for that exact object.
177
+
154
178
  ## Secret Hygiene
155
179
 
156
180
  Command text, action input, action output, history, audit records, and console
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@aipermission/mcp",
3
- "version": "0.2.10",
3
+ "version": "0.2.12",
4
4
  "mcpName": "io.github.aipermission/aipermission-mcp",
5
5
  "description": "Local-first MCP bridge for the aipermission gateway.",
6
6
  "license": "AGPL-3.0-only",
package/server.json CHANGED
@@ -3,12 +3,12 @@
3
3
  "name": "io.github.aipermission/aipermission-mcp",
4
4
  "title": "AIPermission",
5
5
  "description": "Local-first MCP bridge for the AIPermission gateway.",
6
- "version": "0.2.10",
6
+ "version": "0.2.12",
7
7
  "packages": [
8
8
  {
9
9
  "registryType": "npm",
10
10
  "identifier": "@aipermission/mcp",
11
- "version": "0.2.10",
11
+ "version": "0.2.12",
12
12
  "transport": {
13
13
  "type": "stdio"
14
14
  }