@auctra/mcp-gateway 0.1.7 → 0.1.9

package/README.md

@@ -2,6 +2,8 @@
 
 Stage 0 MCP gateway adapter. Wrap MCP tool calls **and installs** with Auctra **Authority Gate** (`action.execute`) before execution.
 
+**REQUIRE_MCP_GATEWAY:** Production orgs (Startup+) default `require_mcp_gateway=true`. MCP-shaped `action.execute` without this package’s stamp (`auctra_mcp_gateway`) is blocked. Set `AUCTRA_REQUIRE_MCP_GATEWAY=1` for a global fail-closed override.
+
 ```ts
 import { Auctra } from "@auctra/sdk";
 import {
@@ -9,6 +11,7 @@ import {
   gateMcpInstall,
   withAuctraGate,
   declareMcpInstallMetadata,
+  REQUIRE_MCP_GATEWAY,
 } from "@auctra/mcp-gateway";
 
 const client = new Auctra({ apiKey: process.env.AUCTRA_API_KEY! });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@auctra/mcp-gateway",
-  "version": "0.1.7",
+  "version": "0.1.9",
   "description": "MCP gateway — gate tool calls and MCP/skill installs through Auctra action.execute",
   "type": "module",
   "main": "./src/index.js",

package/src/index.js

@@ -1,5 +1,20 @@
 import { createHash, createHmac } from "node:crypto";
 
+/** Org/env policy name (SEC-P0-002). */
+export const REQUIRE_MCP_GATEWAY = "REQUIRE_MCP_GATEWAY";
+
+export function mcpGatewayStamp() {
+  return {
+    auctra_mcp_gateway: true,
+    mcp_gateway: true,
+  };
+}
+
+export function requireMcpGateway() {
+  const v = process.env.AUCTRA_REQUIRE_MCP_GATEWAY?.trim().toLowerCase();
+  return v === "1" || v === "true" || v === "yes";
+}
+
 export class McpToolBlockedError extends Error {
   constructor(message, decision, evidence) {
     super(message);
@@ -84,6 +99,7 @@ export function declareMcpInstallMetadata(input) {
     hashMcpPackageManifest(input.manifestBody ?? { name, version: input.install.version ?? null });
   const kind = input.install.kind ?? "mcp";
   return {
+    ...mcpGatewayStamp(),
     mcp_install: {
       name,
       ...(input.install.version ? { version: input.install.version } : {}),
@@ -163,6 +179,7 @@ export async function gateMcpToolCall(input) {
       target: `mcp:${input.toolName}`,
       description: `MCP tool ${input.toolName}`,
       metadata: {
+        ...mcpGatewayStamp(),
         inputs: [
           {
             source: `mcp:${input.toolName}:invocation`,
@@ -181,7 +198,10 @@ export async function gateMcpToolCall(input) {
     throw new McpToolBlockedError(message, result.decision, result.evidence);
   }
 
-  const requireLease = process.env.AUCTRA_REQUIRE_EXECUTION_LEASE === "1";
+  const requireLease =
+    process.env.AUCTRA_REQUIRE_EXECUTION_LEASE === "1" ||
+    (process.env.NODE_ENV === "production" &&
+      Boolean(process.env.AUCTRA_EXECUTION_LEASE_SECRET?.trim()));
   const leaseToken = result.execution_lease?.token;
   if (requireLease || leaseToken) {
     if (!leaseToken) {

package/src/index.ts

@@ -1,5 +1,24 @@
 import { createHash, createHmac } from "node:crypto";
 
+/**
+ * Org/env policy name — when set, MCP-shaped action.execute must carry the
+ * gateway stamp below (SEC-P0-002). Cloud also honors organization.requireMcpGateway.
+ */
+export const REQUIRE_MCP_GATEWAY = "REQUIRE_MCP_GATEWAY";
+
+/** Metadata stamp proving the call came through @auctra/mcp-gateway. */
+export function mcpGatewayStamp(): Record<string, true> {
+  return {
+    auctra_mcp_gateway: true,
+    mcp_gateway: true,
+  };
+}
+
+export function requireMcpGateway(): boolean {
+  const v = process.env.AUCTRA_REQUIRE_MCP_GATEWAY?.trim().toLowerCase();
+  return v === "1" || v === "true" || v === "yes";
+}
+
 export type ExecuteActionClient = {
   action: {
     execute(input: {
@@ -194,6 +213,8 @@ export function declareMcpInstallMetadata(input: {
   issuedAt?: string;
   keyId?: string;
 }): {
+  auctra_mcp_gateway: true;
+  mcp_gateway: true;
   mcp_install: {
     name: string;
     version?: string;
@@ -208,6 +229,8 @@ export function declareMcpInstallMetadata(input: {
     hashMcpPackageManifest(input.manifestBody ?? { name, version: input.install.version ?? null });
   const kind = input.install.kind ?? "mcp";
   return {
+    auctra_mcp_gateway: true as const,
+    mcp_gateway: true as const,
     mcp_install: {
       name,
       ...(input.install.version ? { version: input.install.version } : {}),
@@ -309,6 +332,7 @@ export async function gateMcpToolCall(input: McpToolGateInput) {
       target: `mcp:${input.toolName}`,
       description: `MCP tool ${input.toolName}`,
       metadata: {
+        ...mcpGatewayStamp(),
         inputs: [
           {
             source: `mcp:${input.toolName}:invocation`,
@@ -327,7 +351,10 @@ export async function gateMcpToolCall(input: McpToolGateInput) {
     throw new McpToolBlockedError(message, result.decision, result.evidence);
   }
 
-  const requireLease = process.env.AUCTRA_REQUIRE_EXECUTION_LEASE === "1";
+  const requireLease =
+    process.env.AUCTRA_REQUIRE_EXECUTION_LEASE === "1" ||
+    (process.env.NODE_ENV === "production" &&
+      Boolean(process.env.AUCTRA_EXECUTION_LEASE_SECRET?.trim()));
   const leaseToken = result.execution_lease?.token;
   if (requireLease || leaseToken) {
     if (!leaseToken) {