@centrali-io/centrali-mcp 6.10.1 → 6.11.0

package/dist/tools/compute.js

@@ -61,7 +61,7 @@ function registerComputeTools(server, sdk, centraliUrl, workspaceId) {
             };
         }
     }));
-    (0, _register_js_1.registerTool)(server, "list_triggers", "List function triggers in the workspace. Triggers define how and when compute functions are executed (on-demand, event-driven, scheduled, http-trigger, endpoint).", {
+    (0, _register_js_1.registerTool)(server, "list_triggers", "List function triggers in the workspace. Triggers define how and when compute functions are executed (on-demand, event-driven, scheduled, http-trigger, endpoint). Secret-typed metadata fields (signingSecret, apiKey) are returned masked as '********'.", {
         executionType: zod_1.z
             .enum(["on-demand", "event-driven", "scheduled", "http-trigger", "endpoint"])
             .optional()
@@ -346,7 +346,7 @@ function registerComputeTools(server, sdk, centraliUrl, workspaceId) {
         }
     }));
     // ── Trigger CRUD tools ───────────────────────────────────────────
-    (0, _register_js_1.registerTool)(server, "get_trigger", "Get a function trigger by ID. Returns full trigger details including execution type and metadata.", {
+    (0, _register_js_1.registerTool)(server, "get_trigger", "Get a function trigger by ID. Returns full trigger details including execution type and metadata. Secret-typed metadata fields (signingSecret, apiKey) are write-only and returned masked as '********' — they are never echoed in plaintext on reads. The real value is only shown once in the create_trigger response.", {
         triggerId: zod_1.z.string().describe("The trigger ID (UUID)"),
     }, (_a) => __awaiter(this, [_a], void 0, function* ({ triggerId }) {
         try {
@@ -417,7 +417,7 @@ function registerComputeTools(server, sdk, centraliUrl, workspaceId) {
         triggerMetadata: zod_1.z
             .record(zod_1.z.string(), zod_1.z.any())
             .optional()
-            .describe("Updated type-specific configuration. To rotate an encrypted params value, send params: { KEY: { value: 'new-plaintext', encrypt: true } }. To preserve an existing encrypted value without rotating, echo back the stored shape: params: { KEY: { value: '********', encrypted: true, keyVersion: N } } (use get_trigger to read the current shape). Omit a key from params entirely to remove it."),
+            .describe("Updated type-specific configuration. NOTE: this REPLACES the whole triggerMetadata object, so include every field you want to keep. To rotate an encrypted params value, send params: { KEY: { value: 'new-plaintext', encrypt: true } }. To preserve an existing encrypted value without rotating, echo back the stored shape: params: { KEY: { value: '********', encrypted: true, keyVersion: N } } (use get_trigger to read the current shape). Omit a key from params entirely to remove it. Secret-typed fields signingSecret and apiKey are write-only and stored encrypted at rest: send a plaintext string to set/rotate; send the masked sentinel '********' (or omit the field) to preserve the current value untouched."),
     }, (_a) => __awaiter(this, [_a], void 0, function* ({ triggerId, name, description, enabled, triggerMetadata }) {
         try {
             const input = {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@centrali-io/centrali-mcp",
-  "version": "6.10.1",
+  "version": "6.11.0",
   "description": "Centrali MCP Server - AI assistant integration for Centrali workspaces",
   "main": "dist/index.js",
   "type": "commonjs",
@@ -25,7 +25,7 @@
   "author": "Blueinit",
   "license": "ISC",
   "dependencies": {
-    "@centrali-io/centrali-sdk": "^6.10.1",
+    "@centrali-io/centrali-sdk": "^6.11.0",
     "@modelcontextprotocol/sdk": "^1.28.0"
   },
   "devDependencies": {

package/src/tools/compute.ts

@@ -53,7 +53,7 @@ export function registerComputeTools(server: McpServer, sdk: CentraliSDK, centra
 
   registerTool<any>(server, 
     "list_triggers",
-    "List function triggers in the workspace. Triggers define how and when compute functions are executed (on-demand, event-driven, scheduled, http-trigger, endpoint).",
+    "List function triggers in the workspace. Triggers define how and when compute functions are executed (on-demand, event-driven, scheduled, http-trigger, endpoint). Secret-typed metadata fields (signingSecret, apiKey) are returned masked as '********'.",
     {
       executionType: z
         .enum(["on-demand", "event-driven", "scheduled", "http-trigger", "endpoint"])
@@ -383,7 +383,7 @@ export function registerComputeTools(server: McpServer, sdk: CentraliSDK, centra
 
   registerTool<any>(server, 
     "get_trigger",
-    "Get a function trigger by ID. Returns full trigger details including execution type and metadata.",
+    "Get a function trigger by ID. Returns full trigger details including execution type and metadata. Secret-typed metadata fields (signingSecret, apiKey) are write-only and returned masked as '********' — they are never echoed in plaintext on reads. The real value is only shown once in the create_trigger response.",
     {
       triggerId: z.string().describe("The trigger ID (UUID)"),
     },
@@ -463,7 +463,7 @@ export function registerComputeTools(server: McpServer, sdk: CentraliSDK, centra
       triggerMetadata: z
         .record(z.string(), z.any())
         .optional()
-        .describe("Updated type-specific configuration. To rotate an encrypted params value, send params: { KEY: { value: 'new-plaintext', encrypt: true } }. To preserve an existing encrypted value without rotating, echo back the stored shape: params: { KEY: { value: '********', encrypted: true, keyVersion: N } } (use get_trigger to read the current shape). Omit a key from params entirely to remove it."),
+        .describe("Updated type-specific configuration. NOTE: this REPLACES the whole triggerMetadata object, so include every field you want to keep. To rotate an encrypted params value, send params: { KEY: { value: 'new-plaintext', encrypt: true } }. To preserve an existing encrypted value without rotating, echo back the stored shape: params: { KEY: { value: '********', encrypted: true, keyVersion: N } } (use get_trigger to read the current shape). Omit a key from params entirely to remove it. Secret-typed fields signingSecret and apiKey are write-only and stored encrypted at rest: send a plaintext string to set/rotate; send the masked sentinel '********' (or omit the field) to preserve the current value untouched."),
     },
     async ({ triggerId, name, description, enabled, triggerMetadata }) => {
       try {