@backstage/plugin-mcp-actions-backend 0.1.14-next.1 → 0.1.15-next.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/CHANGELOG.md +19 -0
  2. package/config.schema.json +117 -0
  3. package/package.json +9 -9
  4. package/config.d.ts +0 -90
package/CHANGELOG.md CHANGED
@@ -1,5 +1,24 @@
1
1
  # @backstage/plugin-mcp-actions-backend
2
2
 
3
+ ## 0.1.15-next.0
4
+
5
+ ### Patch Changes
6
+
7
+ - Updated dependencies
8
+ - @backstage/backend-plugin-api@1.9.3-next.0
9
+ - @backstage/plugin-catalog-node@2.2.3-next.0
10
+ - @backstage/catalog-client@1.16.1-next.0
11
+
12
+ ## 0.1.14
13
+
14
+ ### Patch Changes
15
+
16
+ - ed1be73: Validate each action against the MCP tool schema when responding to `tools/list`, and skip any action that doesn't conform instead of failing the entire response. A single misbehaving action with a malformed input schema will now be logged as a warning and omitted from the tool list, letting the remaining actions continue to be served.
17
+ - Updated dependencies
18
+ - @backstage/catalog-client@1.16.0
19
+ - @backstage/backend-plugin-api@1.9.2
20
+ - @backstage/plugin-catalog-node@2.2.2
21
+
3
22
  ## 0.1.14-next.1
4
23
 
5
24
  ### Patch Changes
package/config.schema.json ADDED
@@ -0,0 +1,117 @@
1
+ {
2
+ "$schema": "http://json-schema.org/draft-07/schema#",
3
+ "type": "object",
4
+ "properties": {
5
+ "mcpActions": {
6
+ "type": "object",
7
+ "properties": {
8
+ "name": {
9
+ "type": "string",
10
+ "description": "Display name for the MCP server. Defaults to \"backstage\". Used when running a single bundled server without mcpActions.servers."
11
+ },
12
+ "description": {
13
+ "type": "string",
14
+ "description": "Description of the MCP server. Used when running a single bundled server without mcpActions.servers."
15
+ },
16
+ "namespacedToolNames": {
17
+ "type": "boolean",
18
+ "description": "When true, MCP tool names include the plugin ID prefix to avoid collisions across plugins. For example an action registered as \"get-entity\" by the catalog plugin becomes \"catalog.get-entity\". Defaults to true."
19
+ },
20
+ "tracing": {
21
+ "type": "object",
22
+ "properties": {
23
+ "capture": {
24
+ "type": "object",
25
+ "properties": {
26
+ "toolPayload": {
27
+ "type": "boolean",
28
+ "description": "When true, the MCP tool call's input arguments and output result are included on the MCP `tools/call` server span as `gen_ai.tool.call.arguments` and `gen_ai.tool.call.result`. These attributes are marked Opt-In by the OpenTelemetry GenAI semantic conventions because they may contain sensitive information (entity payloads, scaffolder inputs, free-form text). Defaults to false."
29
+ }
30
+ }
31
+ }
32
+ }
33
+ },
34
+ "servers": {
35
+ "type": "object",
36
+ "additionalProperties": {
37
+ "type": "object",
38
+ "properties": {
39
+ "name": {
40
+ "type": "string",
41
+ "description": "Display name for the MCP server."
42
+ },
43
+ "description": {
44
+ "type": "string",
45
+ "description": "Description of the MCP server."
46
+ },
47
+ "filter": {
48
+ "type": "object",
49
+ "properties": {
50
+ "include": {
51
+ "type": "array",
52
+ "items": {
53
+ "type": "object",
54
+ "properties": {
55
+ "id": {
56
+ "type": "string",
57
+ "description": "Glob pattern matched against action ID."
58
+ },
59
+ "attributes": {
60
+ "type": "object",
61
+ "properties": {
62
+ "destructive": {
63
+ "type": "boolean"
64
+ },
65
+ "readOnly": {
66
+ "type": "boolean"
67
+ },
68
+ "idempotent": {
69
+ "type": "boolean"
70
+ }
71
+ },
72
+ "description": "Match actions by their attribute flags."
73
+ }
74
+ }
75
+ }
76
+ },
77
+ "exclude": {
78
+ "type": "array",
79
+ "items": {
80
+ "type": "object",
81
+ "properties": {
82
+ "id": {
83
+ "type": "string",
84
+ "description": "Glob pattern matched against action ID."
85
+ },
86
+ "attributes": {
87
+ "type": "object",
88
+ "properties": {
89
+ "destructive": {
90
+ "type": "boolean"
91
+ },
92
+ "readOnly": {
93
+ "type": "boolean"
94
+ },
95
+ "idempotent": {
96
+ "type": "boolean"
97
+ }
98
+ },
99
+ "description": "Match actions by their attribute flags."
100
+ }
101
+ }
102
+ }
103
+ }
104
+ },
105
+ "description": "Filter rules to include or exclude specific actions."
106
+ }
107
+ },
108
+ "required": [
109
+ "name"
110
+ ]
111
+ },
112
+ "description": "Named MCP servers, each exposed at /api/mcp-actions/v1/{key}. When not configured, the plugin serves a single server at /api/mcp-actions/v1."
113
+ }
114
+ }
115
+ }
116
+ }
117
+ }
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@backstage/plugin-mcp-actions-backend",
3
- "version": "0.1.14-next.1",
3
+ "version": "0.1.15-next.0",
4
4
  "backstage": {
5
5
  "role": "backend-plugin",
6
6
  "pluginId": "mcp-actions",
@@ -26,7 +26,7 @@
26
26
  "types": "dist/index.d.ts",
27
27
  "files": [
28
28
  "dist",
29
- "config.d.ts"
29
+ "config.schema.json"
30
30
  ],
31
31
  "scripts": {
32
32
  "build": "backstage-cli package build",
@@ -38,11 +38,11 @@
38
38
  "test": "backstage-cli package test"
39
39
  },
40
40
  "dependencies": {
41
- "@backstage/backend-plugin-api": "1.9.2-next.1",
42
- "@backstage/catalog-client": "1.16.0-next.1",
41
+ "@backstage/backend-plugin-api": "1.9.3-next.0",
42
+ "@backstage/catalog-client": "1.16.1-next.0",
43
43
  "@backstage/config": "1.3.8",
44
44
  "@backstage/errors": "1.3.1",
45
- "@backstage/plugin-catalog-node": "2.2.2-next.0",
45
+ "@backstage/plugin-catalog-node": "2.2.3-next.0",
46
46
  "@backstage/types": "1.2.2",
47
47
  "@cfworker/json-schema": "^4.1.1",
48
48
  "@modelcontextprotocol/sdk": "^1.25.2",
@@ -52,14 +52,14 @@
52
52
  "zod": "^3.25.76 || ^4.0.0"
53
53
  },
54
54
  "devDependencies": {
55
- "@backstage/backend-defaults": "0.17.3-next.1",
56
- "@backstage/backend-test-utils": "1.11.4-next.1",
57
- "@backstage/cli": "0.36.3-next.1",
55
+ "@backstage/backend-defaults": "0.17.4-next.0",
56
+ "@backstage/backend-test-utils": "1.11.5-next.0",
57
+ "@backstage/cli": "0.36.4-next.0",
58
58
  "@types/express": "^4.17.6",
59
59
  "@types/supertest": "^2.0.8",
60
60
  "supertest": "^7.0.0"
61
61
  },
62
- "configSchema": "config.d.ts",
62
+ "configSchema": "config.schema.json",
63
63
  "typesVersions": {
64
64
  "*": {
65
65
  "package.json": [
package/config.d.ts DELETED
@@ -1,90 +0,0 @@
1
- /*
2
- * Copyright 2026 The Backstage Authors
3
- *
4
- * Licensed under the Apache License, Version 2.0 (the "License");
5
- * you may not use this file except in compliance with the License.
6
- * You may obtain a copy of the License at
7
- *
8
- * http://www.apache.org/licenses/LICENSE-2.0
9
- *
10
- * Unless required by applicable law or agreed to in writing, software
11
- * distributed under the License is distributed on an "AS IS" BASIS,
12
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13
- * See the License for the specific language governing permissions and
14
- * limitations under the License.
15
- */
16
-
17
- export interface Config {
18
- mcpActions?: {
19
- /**
20
- * Display name for the MCP server. Defaults to "backstage".
21
- * Used when running a single bundled server without mcpActions.servers.
22
- */
23
- name?: string;
24
-
25
- /**
26
- * Description of the MCP server.
27
- * Used when running a single bundled server without mcpActions.servers.
28
- */
29
- description?: string;
30
-
31
- /**
32
- * When true, MCP tool names include the plugin ID prefix to avoid
33
- * collisions across plugins. For example an action registered as
34
- * "get-entity" by the catalog plugin becomes "catalog.get-entity".
35
- * Defaults to true.
36
- */
37
- namespacedToolNames?: boolean;
38
-
39
- tracing?: {
40
- capture?: {
41
- /**
42
- * When true, the MCP tool call's input arguments and output result
43
- * are included on the MCP `tools/call` server span as
44
- * `gen_ai.tool.call.arguments` and `gen_ai.tool.call.result`.
45
- * These attributes are marked Opt-In by the OpenTelemetry GenAI
46
- * semantic conventions because they may contain sensitive
47
- * information (entity payloads, scaffolder inputs, free-form
48
- * text). Defaults to false.
49
- */
50
- toolPayload?: boolean;
51
- };
52
- };
53
-
54
- /**
55
- * Named MCP servers, each exposed at /api/mcp-actions/v1/{key}.
56
- * When not configured, the plugin serves a single server at /api/mcp-actions/v1.
57
- */
58
- servers?: {
59
- [serverKey: string]: {
60
- /** Display name for the MCP server. */
61
- name: string;
62
- /** Description of the MCP server. */
63
- description?: string;
64
- /** Filter rules to include or exclude specific actions. */
65
- filter?: {
66
- include?: Array<{
67
- /** Glob pattern matched against action ID. */
68
- id?: string;
69
- /** Match actions by their attribute flags. */
70
- attributes?: {
71
- destructive?: boolean;
72
- readOnly?: boolean;
73
- idempotent?: boolean;
74
- };
75
- }>;
76
- exclude?: Array<{
77
- /** Glob pattern matched against action ID. */
78
- id?: string;
79
- /** Match actions by their attribute flags. */
80
- attributes?: {
81
- destructive?: boolean;
82
- readOnly?: boolean;
83
- idempotent?: boolean;
84
- };
85
- }>;
86
- };
87
- };
88
- };
89
- };
90
- }