@ampless/mcp-server 1.0.0-alpha.11 → 1.0.0-alpha.12
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.ja.md +1 -1
- package/README.md +1 -1
- package/package.json +2 -2
package/README.ja.md
CHANGED
|
@@ -121,7 +121,7 @@ AI に投稿本文を生成させる場合は、markdown を指定するのが
|
|
|
121
121
|
## セキュリティに関する注意
|
|
122
122
|
|
|
123
123
|
- **エディタートラストモデル。** ampless は `editor` と `admin` を同一のトラストクラスとして扱います — どちらも投稿本文に任意の HTML / JS を格納できます（`docs/architecture/04-access-layer-mcp.md` 参照）。MCP サーバーが書き込める内容は、そのユーザーアカウントが管理 UI から書き込める内容と同じです。
|
|
124
|
-
- **設定ファイル内の認証情報。** `AMPLESS_MCP_PASSWORD` は Claude Desktop / Cursor の設定ファイル内にプレーンテキストで保存されます。SSH 秘密鍵と同様に扱ってください。
|
|
124
|
+
- **設定ファイル内の認証情報。** `AMPLESS_MCP_PASSWORD` は Claude Desktop / Cursor の設定ファイル内にプレーンテキストで保存されます。SSH 秘密鍵と同様に扱ってください。OS キーチェーン連携はロードマップで対応予定です。
|
|
125
125
|
- **AWS 認証情報。** `upload_media` のみ必要です。サイトの S3 バケットへの書き込み権限のみを持つ専用の IAM ユーザー / ロールを使用してください。
|
|
126
126
|
|
|
127
127
|
## CLI フラグ
|
package/README.md
CHANGED
|
@@ -121,7 +121,7 @@ If you're letting the AI generate post bodies, asking for markdown is usually ea
|
|
|
121
121
|
## Security notes
|
|
122
122
|
|
|
123
123
|
- **Editor trust model.** ampless treats `editor` and `admin` as a single trust class — both can store arbitrary HTML/JS in post bodies (see `docs/architecture/04-access-layer-mcp.md`). Whatever the MCP server can write, that user account could already write through the admin UI.
|
|
124
|
-
- **Credentials in the config file.** `AMPLESS_MCP_PASSWORD` lives in plaintext inside Claude Desktop / Cursor's config file. Treat that file like an SSH private key.
|
|
124
|
+
- **Credentials in the config file.** `AMPLESS_MCP_PASSWORD` lives in plaintext inside Claude Desktop / Cursor's config file. Treat that file like an SSH private key. OS keychain integration is on the roadmap.
|
|
125
125
|
- **AWS credentials.** Only `upload_media` requires them. Use a dedicated IAM user / role with write access only to your site's S3 bucket.
|
|
126
126
|
|
|
127
127
|
## CLI flags
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@ampless/mcp-server",
|
|
3
|
-
"version": "1.0.0-alpha.
|
|
3
|
+
"version": "1.0.0-alpha.12",
|
|
4
4
|
"description": "MCP server for ampless — lets AI agents (Claude Desktop, Cursor, Claude Code) read and write posts and media via AppSync",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"type": "module",
|
|
@@ -36,7 +36,7 @@
|
|
|
36
36
|
"@aws-sdk/client-s3": "^3.1048.0",
|
|
37
37
|
"amazon-cognito-identity-js": "^6.3.12",
|
|
38
38
|
"fflate": "^0.8.2",
|
|
39
|
-
"ampless": "1.0.0-alpha.
|
|
39
|
+
"ampless": "1.0.0-alpha.11"
|
|
40
40
|
},
|
|
41
41
|
"keywords": [
|
|
42
42
|
"ampless",
|