@atbash/atbash-mcp 0.0.3-dev.0 → 0.0.3-dev.1

package/README.md

@@ -33,7 +33,8 @@ Add to your `claude_desktop_config.json`:
       "command": "npx",
       "args": ["-y", "@atbash/mcp"],
       "env": {
-        "ATBASH_AGENT_PRIVKEY": "your_agent_private_key_here"
+        "ATBASH_AGENT_PRIVKEY": "your_agent_private_key_here",
+        "ATBASH_ORG_NAME": "your_org_name"
       }
     }
   }
@@ -51,6 +52,7 @@ const transport = new StdioClientTransport({
   env: {
     ...process.env,
     ATBASH_AGENT_PRIVKEY: process.env.ATBASH_AGENT_PRIVKEY,
+    ATBASH_ORG_NAME: process.env.ATBASH_ORG_NAME,
   },
 });
 ```
@@ -60,6 +62,7 @@ const transport = new StdioClientTransport({
 | Variable | Required | Description |
 |---|---|---|
 | `ATBASH_AGENT_PRIVKEY` | Yes | Your Atbash agent private key |
+| `ATBASH_ORG_NAME` | Recommended | Your organization name. The SDK resolves the correct chain from it; without it, calls fall back to the default public chain. |
 | `ATBASH_ENDPOINT` | No | Override the default Atbash endpoint (`https://atbash.ai`) |
 
 ## Tools
@@ -157,5 +160,5 @@ A runnable example is in [`examples/mcp-runtime-agent/`](./examples/mcp-runtime-
 
 ```bash
 npm install && npm run build
-ATBASH_AGENT_PRIVKEY=your_key_here node examples/mcp-runtime-agent/client.mjs
+ATBASH_AGENT_PRIVKEY=your_key_here ATBASH_ORG_NAME=your_org node examples/mcp-runtime-agent/client.mjs
 ```

package/dist/index.js

@@ -51,14 +51,17 @@ function registerPolicyResource(server2, agent2, endpoint2) {
 // src/tools/judge.ts
 import {
   checkAgentExists,
-  createAtbashClient,
-  logToolCall
+  createAtbashClient
 } from "@atbash/sdk";
 import { z as z2 } from "zod";
 
 // src/utils.ts
-function createClientOpts(endpoint2) {
-  return endpoint2 ? { endpoint: endpoint2 } : void 0;
+function createClientOpts(agent2, endpoint2, orgName2) {
+  const opts = {};
+  if (endpoint2) opts.endpoint = endpoint2;
+  if (agent2) opts.auth = agent2;
+  if (orgName2) opts.orgName = orgName2;
+  return Object.keys(opts).length > 0 ? opts : void 0;
 }
 function safeErrorMessage(error) {
   return error instanceof Error ? error.message : String(error);
@@ -76,11 +79,12 @@ function toErrorContent(error) {
 }
 
 // src/tools/judge.ts
-function registerJudgeTools(server2, agent2, endpoint2) {
-  const opts = createClientOpts(endpoint2);
+function registerJudgeTools(server2, agent2, endpoint2, orgName2) {
+  const opts = createClientOpts(agent2, endpoint2, orgName2);
   const client = createAtbashClient({
     keyPair: { privKey: agent2.privkey, pubKey: agent2.pubkey },
-    judge: endpoint2 ? { endpoint: endpoint2 } : void 0
+    judge: endpoint2 ? { endpoint: endpoint2 } : void 0,
+    orgName: orgName2
   });
   server2.registerTool(
     "atbash_judge",
@@ -108,8 +112,15 @@ function registerJudgeTools(server2, agent2, endpoint2) {
           args: parsedArgs ?? { action },
           context: `${action} \u2014 ${context}`
         });
-        const normalized = decision.verdict === "HOLD" ? { ...decision, verdict: "ALLOW", allow: true } : decision;
-        return toJsonContent(normalized);
+        if (decision.verdict === "HOLD") {
+          return toJsonContent({
+            ...decision,
+            allow: false,
+            reason: `Action held for operator review. The agent will not be jailed \u2014 please approve or reject this request from the Atbash dashboard, then ask the agent to try again.
+Reason: ${decision.reason ?? ""}`
+          });
+        }
+        return toJsonContent(decision);
       } catch (error) {
         return toErrorContent(error);
       }
@@ -128,17 +139,27 @@ function registerJudgeTools(server2, agent2, endpoint2) {
     },
     async ({ action, context, tool_name, tool_args_json }) => {
       try {
-        const result = await logToolCall(
-          action,
-          context,
-          agent2,
-          void 0,
-          {
-            toolName: tool_name,
-            toolArgsJson: tool_args_json
-          },
-          opts
-        );
+        let parsedArgs = void 0;
+        if (tool_args_json) {
+          try {
+            parsedArgs = JSON.parse(tool_args_json);
+          } catch {
+            parsedArgs = tool_args_json;
+          }
+        }
+        const result = await client.auditToolCall({
+          toolName: tool_name ?? "mcp_log",
+          args: parsedArgs ?? { action },
+          context: `${action} \u2014 ${context}`
+        });
+        if (result.verdict === "HOLD") {
+          return toJsonContent({
+            ...result,
+            allow: false,
+            reason: `Action held for operator review. The agent will not be jailed \u2014 please approve or reject this request from the Atbash dashboard, then ask the agent to try again.
+Reason: ${result.reason ?? ""}`
+          });
+        }
         return toJsonContent(result);
       } catch (error) {
         return toErrorContent(error);
@@ -171,7 +192,7 @@ import {
   getAgentPolicy,
   getAgentToolCalls,
   getHeldActionReviews,
-  getOrgTierInfo,
+  getOrgSubscription,
   getOrgToolCalls,
   getPendingHeldActions,
   getSafetyStats,
@@ -183,8 +204,8 @@ import { z as z3 } from "zod";
 function defaultMaxCount(value) {
   return value ?? 20;
 }
-function registerQueryTools(server2, agent2, endpoint2) {
-  const opts = createClientOpts(endpoint2);
+function registerQueryTools(server2, agent2, endpoint2, orgName2) {
+  const opts = createClientOpts(agent2, endpoint2, orgName2);
   server2.registerTool(
     "atbash_get_policy",
     {
@@ -309,7 +330,7 @@ function registerQueryTools(server2, agent2, endpoint2) {
     },
     async ({ org_name }) => {
       try {
-        return toJsonContent(await getOrgTierInfo(org_name, opts));
+        return toJsonContent(await getOrgSubscription(org_name, opts));
       } catch (error) {
         return toErrorContent(error);
       }
@@ -436,6 +457,7 @@ if (!privkey) {
 }
 var agent = loadAgent(privkey);
 var endpoint = process.env.ATBASH_ENDPOINT;
+var orgName = process.env.ATBASH_ORG_NAME;
 setupTelemetry({ enabled: true, source: "plugin:mcp" });
 process.once("beforeExit", () => shutdownTelemetry());
 process.once("SIGINT", () => shutdownTelemetry().finally(() => process.exit(0)));
@@ -444,9 +466,9 @@ var server = new McpServer({
   name: "atbash-safety",
   version: "1.0.0"
 });
-registerJudgeTools(server, agent, endpoint);
+registerJudgeTools(server, agent, endpoint, orgName);
 registerStatusTools(server, agent.pubkey, endpoint);
-registerQueryTools(server, agent, endpoint);
+registerQueryTools(server, agent, endpoint, orgName);
 registerPolicyResource(server, agent, endpoint);
 registerSafetyPrompt(server);
 var transport = new StdioServerTransport();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atbash/atbash-mcp",
-  "version": "0.0.3-dev.0",
+  "version": "0.0.3-dev.1",
   "description": "Atbash safety judge exposed as a standalone MCP server",
   "type": "module",
   "main": "dist/index.js",
@@ -41,7 +41,7 @@
     "publish:dev": "node scripts/publish-dev.mjs"
   },
   "dependencies": {
-    "@atbash/sdk": "dev",
+    "@atbash/sdk": "0.3.11-dev.17",
     "@modelcontextprotocol/sdk": "^1.12.3",
     "zod": "^3.25.76"
   },