@centrali-io/centrali-mcp 4.2.4 → 4.2.5

package/dist/tools/describe.js

@@ -469,6 +469,16 @@ function registerDescribeTools(server) {
                                 required_params: ["triggerId"],
                             },
                         },
+                        sandbox_api: {
+                            description: "Functions receive an `api` object with built-in utilities. Key crypto methods:",
+                            crypto: {
+                                "api.crypto.sha256(data)": "SHA256 hash → base64 string",
+                                "api.crypto.hmacSha256(key, data, options?)": "HMAC-SHA256 → base64 string. options: { keyEncoding: 'utf8' | 'base64' }",
+                                "api.crypto.rsaSign(privateKeyPem, data, algorithm?)": "RSA signature → base64url string. algorithm: 'RS256' (default), 'RS384', 'RS512'",
+                                "api.crypto.signJwt(privateKeyPem, payload, options?)": "Build + sign a JWT → 'header.payload.signature'. options: { algorithm, expiresIn (seconds), issuer }",
+                            },
+                            note: "Private keys should be stored as encrypted trigger params. signJwt automatically sets iat and supports RS256/RS384/RS512.",
+                        },
                         tips: [
                             "Use list_functions to see all available functions",
                             "Use list_triggers to see how functions are wired to execution events",
@@ -477,6 +487,7 @@ function registerDescribeTools(server) {
                             "Use pause_trigger/resume_trigger to temporarily disable triggers without deleting them",
                             "Use test_function to validate code before creating or updating a function",
                             "Use create_function + create_trigger together to set up a complete compute pipeline",
+                            "Use api.crypto.signJwt() for GitHub App, Google Cloud, or Azure AD authentication flows",
                         ],
                     }, null, 2),
                 },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@centrali-io/centrali-mcp",
-  "version": "4.2.4",
+  "version": "4.2.5",
   "description": "Centrali MCP Server - AI assistant integration for Centrali workspaces",
   "main": "dist/index.js",
   "type": "commonjs",

package/src/tools/describe.ts

@@ -539,6 +539,16 @@ export function registerDescribeTools(server: McpServer) {
                   required_params: ["triggerId"],
                 },
               },
+              sandbox_api: {
+                description: "Functions receive an `api` object with built-in utilities. Key crypto methods:",
+                crypto: {
+                  "api.crypto.sha256(data)": "SHA256 hash → base64 string",
+                  "api.crypto.hmacSha256(key, data, options?)": "HMAC-SHA256 → base64 string. options: { keyEncoding: 'utf8' | 'base64' }",
+                  "api.crypto.rsaSign(privateKeyPem, data, algorithm?)": "RSA signature → base64url string. algorithm: 'RS256' (default), 'RS384', 'RS512'",
+                  "api.crypto.signJwt(privateKeyPem, payload, options?)": "Build + sign a JWT → 'header.payload.signature'. options: { algorithm, expiresIn (seconds), issuer }",
+                },
+                note: "Private keys should be stored as encrypted trigger params. signJwt automatically sets iat and supports RS256/RS384/RS512.",
+              },
               tips: [
                 "Use list_functions to see all available functions",
                 "Use list_triggers to see how functions are wired to execution events",
@@ -547,6 +557,7 @@ export function registerDescribeTools(server: McpServer) {
                 "Use pause_trigger/resume_trigger to temporarily disable triggers without deleting them",
                 "Use test_function to validate code before creating or updating a function",
                 "Use create_function + create_trigger together to set up a complete compute pipeline",
+                "Use api.crypto.signJwt() for GitHub App, Google Cloud, or Azure AD authentication flows",
               ],
             },
             null,