@atbash/atbash-mcp 0.0.5 → 0.0.6-dev.1

package/README.md

@@ -33,7 +33,8 @@ Add to your `claude_desktop_config.json`:
       "command": "npx",
       "args": ["-y", "@atbash/mcp"],
       "env": {
-        "ATBASH_AGENT_PRIVKEY": "your_agent_private_key_here"
+        "ATBASH_AGENT_PRIVKEY": "your_agent_private_key_here",
+        "ATBASH_ORG_NAME": "your_org_name"
       }
     }
   }
@@ -51,6 +52,7 @@ const transport = new StdioClientTransport({
   env: {
     ...process.env,
     ATBASH_AGENT_PRIVKEY: process.env.ATBASH_AGENT_PRIVKEY,
+    ATBASH_ORG_NAME: process.env.ATBASH_ORG_NAME,
   },
 });
 ```
@@ -60,6 +62,7 @@ const transport = new StdioClientTransport({
 | Variable | Required | Description |
 |---|---|---|
 | `ATBASH_AGENT_PRIVKEY` | Yes | Your Atbash agent private key |
+| `ATBASH_ORG_NAME` | Recommended | Your organization name. The SDK resolves the correct chain from it; without it, calls fall back to the default public chain. |
 | `ATBASH_ENDPOINT` | No | Override the default Atbash endpoint (`https://atbash.ai`) |
 
 ## Tools
@@ -157,5 +160,5 @@ A runnable example is in [`examples/mcp-runtime-agent/`](./examples/mcp-runtime-
 
 ```bash
 npm install && npm run build
-ATBASH_AGENT_PRIVKEY=your_key_here node examples/mcp-runtime-agent/client.mjs
+ATBASH_AGENT_PRIVKEY=your_key_here ATBASH_ORG_NAME=your_org node examples/mcp-runtime-agent/client.mjs
 ```

package/dist/index.js

@@ -49,16 +49,16 @@ function registerPolicyResource(server2, agent2, endpoint2) {
 }
 
 // src/tools/judge.ts
-import {
-  checkAgentExists,
-  createAtbashClient,
-  logToolCall
-} from "@atbash/sdk";
+import { Atbash } from "@atbash/sdk";
 import { z as z2 } from "zod";
 
 // src/utils.ts
-function createClientOpts(endpoint2) {
-  return endpoint2 ? { endpoint: endpoint2 } : void 0;
+function createClientOpts(agent2, endpoint2, orgName2) {
+  void agent2;
+  const opts = {};
+  if (endpoint2) opts.endpoint = endpoint2;
+  if (orgName2) opts.orgName = orgName2;
+  return Object.keys(opts).length > 0 ? opts : void 0;
 }
 function safeErrorMessage(error) {
   return error instanceof Error ? error.message : String(error);
@@ -76,12 +76,9 @@ function toErrorContent(error) {
 }
 
 // src/tools/judge.ts
-function registerJudgeTools(server2, agent2, endpoint2) {
-  const opts = createClientOpts(endpoint2);
-  const client = createAtbashClient({
-    keyPair: { privKey: agent2.privkey, pubKey: agent2.pubkey },
-    judge: endpoint2 ? { endpoint: endpoint2 } : void 0
-  });
+function registerJudgeTools(server2, agent2, endpoint2, orgName2) {
+  const opts = createClientOpts(agent2, endpoint2, orgName2);
+  const client = new Atbash(agent2.privkey, opts);
   server2.registerTool(
     "atbash_judge",
     {
@@ -108,8 +105,15 @@ function registerJudgeTools(server2, agent2, endpoint2) {
           args: parsedArgs ?? { action },
           context: `${action} \u2014 ${context}`
         });
-        const normalized = decision.verdict === "HOLD" ? { ...decision, verdict: "ALLOW", allow: true } : decision;
-        return toJsonContent(normalized);
+        if (decision.verdict === "HOLD") {
+          const holdParts = [
+            "Action held for operator review. The agent will not be jailed \u2014 please approve or reject this request from the Atbash dashboard, then ask the agent to try again.",
+            `Reason: ${decision.reason ?? ""}`
+          ];
+          if (decision.toolCallId) holdParts.push(`Tool Call ID: ${decision.toolCallId}`);
+          return toJsonContent({ ...decision, allow: false, reason: holdParts.join("\n") });
+        }
+        return toJsonContent(decision);
       } catch (error) {
         return toErrorContent(error);
       }
@@ -128,17 +132,27 @@ function registerJudgeTools(server2, agent2, endpoint2) {
     },
     async ({ action, context, tool_name, tool_args_json }) => {
       try {
-        const result = await logToolCall(
-          action,
-          context,
-          agent2,
-          void 0,
-          {
-            toolName: tool_name,
-            toolArgsJson: tool_args_json
-          },
-          opts
-        );
+        let parsedArgs = void 0;
+        if (tool_args_json) {
+          try {
+            parsedArgs = JSON.parse(tool_args_json);
+          } catch {
+            parsedArgs = tool_args_json;
+          }
+        }
+        const result = await client.auditToolCall({
+          toolName: tool_name ?? "mcp_log",
+          args: parsedArgs ?? { action },
+          context: `${action} \u2014 ${context}`
+        });
+        if (result.verdict === "HOLD") {
+          const holdParts = [
+            "Action held for operator review. The agent will not be jailed \u2014 please approve or reject this request from the Atbash dashboard, then ask the agent to try again.",
+            `Reason: ${result.reason ?? ""}`
+          ];
+          if (result.toolCallId) holdParts.push(`Tool Call ID: ${result.toolCallId}`);
+          return toJsonContent({ ...result, allow: false, reason: holdParts.join("\n") });
+        }
         return toJsonContent(result);
       } catch (error) {
         return toErrorContent(error);
@@ -156,7 +170,7 @@ function registerJudgeTools(server2, agent2, endpoint2) {
     async ({ pubkey }) => {
       try {
         const selectedPubkey = pubkey ?? agent2.pubkey;
-        const registered = await checkAgentExists(selectedPubkey, opts);
+        const registered = await client.checkAgentExists(selectedPubkey);
         return toJsonContent({ registered, pubkey: selectedPubkey });
       } catch (error) {
         return toErrorContent(error);
@@ -166,25 +180,14 @@ function registerJudgeTools(server2, agent2, endpoint2) {
 }
 
 // src/tools/queries.ts
-import {
-  getAgentDetail,
-  getAgentPolicy,
-  getAgentToolCalls,
-  getHeldActionReviews,
-  getOrgTierInfo,
-  getOrgToolCalls,
-  getPendingHeldActions,
-  getSafetyStats,
-  getToolCallCount,
-  getToolCallFull,
-  getToolCalls
-} from "@atbash/sdk";
+import { Atbash as Atbash2 } from "@atbash/sdk";
 import { z as z3 } from "zod";
 function defaultMaxCount(value) {
   return value ?? 20;
 }
-function registerQueryTools(server2, agent2, endpoint2) {
-  const opts = createClientOpts(endpoint2);
+function registerQueryTools(server2, agent2, endpoint2, orgName2) {
+  const opts = createClientOpts(agent2, endpoint2, orgName2);
+  const client = new Atbash2(agent2.privkey, opts);
   server2.registerTool(
     "atbash_get_policy",
     {
@@ -195,7 +198,7 @@ function registerQueryTools(server2, agent2, endpoint2) {
     },
     async ({ pubkey }) => {
       try {
-        return toJsonContent(await getAgentPolicy(pubkey ?? agent2.pubkey, opts));
+        return toJsonContent(await client.getAgentPolicy(pubkey ?? agent2.pubkey));
       } catch (error) {
         return toErrorContent(error);
       }
@@ -211,7 +214,7 @@ function registerQueryTools(server2, agent2, endpoint2) {
     },
     async ({ pubkey }) => {
       try {
-        return toJsonContent(await getAgentDetail(pubkey ?? agent2.pubkey, opts));
+        return toJsonContent(await client.getAgentDetail(pubkey ?? agent2.pubkey));
       } catch (error) {
         return toErrorContent(error);
       }
@@ -227,7 +230,7 @@ function registerQueryTools(server2, agent2, endpoint2) {
     },
     async ({ max_count }) => {
       try {
-        return toJsonContent(await getToolCalls(defaultMaxCount(max_count), opts));
+        return toJsonContent(await client.getToolCalls(defaultMaxCount(max_count)));
       } catch (error) {
         return toErrorContent(error);
       }
@@ -245,7 +248,7 @@ function registerQueryTools(server2, agent2, endpoint2) {
     async ({ pubkey, max_count }) => {
       try {
         return toJsonContent(
-          await getAgentToolCalls(pubkey ?? agent2.pubkey, defaultMaxCount(max_count), opts)
+          await client.getAgentToolCalls(pubkey ?? agent2.pubkey, defaultMaxCount(max_count))
         );
       } catch (error) {
         return toErrorContent(error);
@@ -263,7 +266,7 @@ function registerQueryTools(server2, agent2, endpoint2) {
     },
     async ({ org_name, max_count }) => {
       try {
-        return toJsonContent(await getOrgToolCalls(org_name, defaultMaxCount(max_count), opts));
+        return toJsonContent(await client.getOrgToolCalls(org_name, defaultMaxCount(max_count)));
       } catch (error) {
         return toErrorContent(error);
       }
@@ -279,7 +282,7 @@ function registerQueryTools(server2, agent2, endpoint2) {
     },
     async ({ tool_call_id }) => {
       try {
-        return toJsonContent(await getToolCallFull(tool_call_id, opts));
+        return toJsonContent(await client.getToolCallFull(tool_call_id));
       } catch (error) {
         return toErrorContent(error);
       }
@@ -293,7 +296,7 @@ function registerQueryTools(server2, agent2, endpoint2) {
     },
     async () => {
       try {
-        return toJsonContent({ count: await getToolCallCount(opts) });
+        return toJsonContent({ count: await client.getToolCallCount() });
       } catch (error) {
         return toErrorContent(error);
       }
@@ -309,7 +312,7 @@ function registerQueryTools(server2, agent2, endpoint2) {
     },
     async ({ org_name }) => {
       try {
-        return toJsonContent(await getOrgTierInfo(org_name, opts));
+        return toJsonContent(await client.getOrgSubscription(org_name));
       } catch (error) {
         return toErrorContent(error);
       }
@@ -327,7 +330,7 @@ function registerQueryTools(server2, agent2, endpoint2) {
     async ({ org_name, max_count }) => {
       try {
         return toJsonContent(
-          await getPendingHeldActions(org_name, defaultMaxCount(max_count), opts)
+          await client.getPendingHeldActions(org_name, defaultMaxCount(max_count))
         );
       } catch (error) {
         return toErrorContent(error);
@@ -345,7 +348,7 @@ function registerQueryTools(server2, agent2, endpoint2) {
     },
     async ({ org_name, max_count }) => {
       try {
-        return toJsonContent(await getHeldActionReviews(org_name, defaultMaxCount(max_count), opts));
+        return toJsonContent(await client.getHeldActionReviews(org_name, defaultMaxCount(max_count)));
       } catch (error) {
         return toErrorContent(error);
       }
@@ -359,7 +362,7 @@ function registerQueryTools(server2, agent2, endpoint2) {
     },
     async () => {
       try {
-        return toJsonContent(await getSafetyStats(opts));
+        return toJsonContent(await client.getSafetyStats());
       } catch (error) {
         return toErrorContent(error);
       }
@@ -436,6 +439,7 @@ if (!privkey) {
 }
 var agent = loadAgent(privkey);
 var endpoint = process.env.ATBASH_ENDPOINT;
+var orgName = process.env.ATBASH_ORG_NAME;
 setupTelemetry({ enabled: true, source: "plugin:mcp" });
 process.once("beforeExit", () => shutdownTelemetry());
 process.once("SIGINT", () => shutdownTelemetry().finally(() => process.exit(0)));
@@ -444,9 +448,9 @@ var server = new McpServer({
   name: "atbash-safety",
   version: "1.0.0"
 });
-registerJudgeTools(server, agent, endpoint);
+registerJudgeTools(server, agent, endpoint, orgName);
 registerStatusTools(server, agent.pubkey, endpoint);
-registerQueryTools(server, agent, endpoint);
+registerQueryTools(server, agent, endpoint, orgName);
 registerPolicyResource(server, agent, endpoint);
 registerSafetyPrompt(server);
 var transport = new StdioServerTransport();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atbash/atbash-mcp",
-  "version": "0.0.5",
+  "version": "0.0.6-dev.1",
   "description": "Atbash safety judge exposed as a standalone MCP server",
   "type": "module",
   "main": "dist/index.js",
@@ -41,7 +41,7 @@
     "publish:dev": "node scripts/publish-dev.mjs"
   },
   "dependencies": {
-    "@atbash/sdk": "^0.3.25",
+    "@atbash/sdk": "0.5.3-dev.0",
     "@modelcontextprotocol/sdk": "^1.12.3",
     "zod": "^3.25.76"
   },