@atbash/atbash-mcp 0.0.12-dev.1 → 0.0.12-dev.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +7 -8
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
# `@atbash/mcp`
|
|
1
|
+
# `@atbash/atbash-mcp`
|
|
2
2
|
|
|
3
3
|
Expose Atbash as a standalone MCP server.
|
|
4
4
|
|
|
@@ -7,7 +7,7 @@ This package starts an MCP server process that loads one Atbash agent identity a
|
|
|
7
7
|
## Installation
|
|
8
8
|
|
|
9
9
|
```bash
|
|
10
|
-
npm install @atbash/mcp
|
|
10
|
+
npm install @atbash/atbash-mcp@0.0.12-dev.2
|
|
11
11
|
```
|
|
12
12
|
|
|
13
13
|
## When To Use It
|
|
@@ -31,7 +31,7 @@ Add to your `claude_desktop_config.json`:
|
|
|
31
31
|
"mcpServers": {
|
|
32
32
|
"atbash": {
|
|
33
33
|
"command": "npx",
|
|
34
|
-
"args": ["-y", "@atbash/mcp"],
|
|
34
|
+
"args": ["-y", "@atbash/atbash-mcp@0.0.12-dev.2"],
|
|
35
35
|
"env": {
|
|
36
36
|
"ATBASH_AGENT_PRIVKEY": "your_agent_private_key_here",
|
|
37
37
|
"ATBASH_ORG_NAME": "your_org_name"
|
|
@@ -48,7 +48,7 @@ import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js"
|
|
|
48
48
|
|
|
49
49
|
const transport = new StdioClientTransport({
|
|
50
50
|
command: "npx",
|
|
51
|
-
args: ["-y", "@atbash/mcp"],
|
|
51
|
+
args: ["-y", "@atbash/atbash-mcp@0.0.12-dev.2"],
|
|
52
52
|
env: {
|
|
53
53
|
...process.env,
|
|
54
54
|
ATBASH_AGENT_PRIVKEY: process.env.ATBASH_AGENT_PRIVKEY,
|
|
@@ -64,6 +64,7 @@ const transport = new StdioClientTransport({
|
|
|
64
64
|
| `ATBASH_AGENT_PRIVKEY` | Yes | Your Atbash agent private key |
|
|
65
65
|
| `ATBASH_ORG_NAME` | Recommended | Your organization name. The SDK resolves the correct chain from it; without it, calls fall back to the default public chain. |
|
|
66
66
|
| `ATBASH_ENDPOINT` | No | Override the default Atbash endpoint (`https://atbash.ai`) |
|
|
67
|
+
| `ATBASH_FAIL_CLOSED` | No | When `false` or `0`, the server allows actions when the judge is unreachable instead of denying them. Defaults to `true` (fail closed). |
|
|
67
68
|
|
|
68
69
|
## Tools
|
|
69
70
|
|
|
@@ -80,7 +81,7 @@ Submit an action for safety judgment before executing it.
|
|
|
80
81
|
| `tool_name` | string | No | Name of the tool being called |
|
|
81
82
|
| `tool_args_json` | string | No | JSON string of tool arguments |
|
|
82
83
|
|
|
83
|
-
Returns: `{ verdict, allow, reason,
|
|
84
|
+
Returns: `{ verdict, allow, reason, toolCallId }`
|
|
84
85
|
|
|
85
86
|
#### `atbash_log`
|
|
86
87
|
|
|
@@ -160,9 +161,7 @@ past, use a plugin that wraps the tool-call boundary itself — for example
|
|
|
160
161
|
`@atbash/atbash-langchain`, `@atbash/atbash-langgraph`, the OpenClaw plugin, or
|
|
161
162
|
the Codex/ChatGPT hook, all of which refuse the call before the tool executes.
|
|
162
163
|
|
|
163
|
-
An `ALLOW` also has to have a verdict behind it.
|
|
164
|
-
treats a judge response body with no `verdict` field as an audit-tier pass and
|
|
165
|
-
synthesizes `{"allow": true, "verdict": "ALLOW"}` from it — including for a body
|
|
164
|
+
An `ALLOW` also has to have a verdict behind it. Prior SDK versions (e.g. 0.5.3-dev.0) treated a judge response body with no `verdict` field as an audit-tier pass — this plugin guards against that at any SDK version — synthesizing `{"allow": true, "verdict": "ALLOW"}` from it — including for a body
|
|
166
165
|
that goes on to say `"action_type": "block"`. The shipped configuration points
|
|
167
166
|
at an allowlisted endpoint, for which the SDK sets no `verifyPubKey` and so
|
|
168
167
|
skips response-signature verification entirely, which leaves schema drift, a
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@atbash/atbash-mcp",
|
|
3
|
-
"version": "0.0.12-dev.
|
|
3
|
+
"version": "0.0.12-dev.3",
|
|
4
4
|
"description": "Atbash safety judge exposed as a standalone MCP server",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "dist/index.js",
|
|
@@ -48,7 +48,7 @@
|
|
|
48
48
|
"release:dev": "node scripts/release.mjs --channel dev"
|
|
49
49
|
},
|
|
50
50
|
"dependencies": {
|
|
51
|
-
"@atbash/sdk": "0.13.
|
|
51
|
+
"@atbash/sdk": "0.13.3-dev.0",
|
|
52
52
|
"@modelcontextprotocol/sdk": "^1.12.3",
|
|
53
53
|
"zod": "^3.25.76"
|
|
54
54
|
},
|