@certscore/mcp 0.2.11 → 0.2.12

package/README.md

@@ -2,7 +2,7 @@
 
 CertScore MCP exposes a focused Model Context Protocol server for CertScore Pulse workflows.
 
-Status: public developer preview. Version 0.2.11 is prepared for the hosted Streamable HTTP service and the next deterministic Homebrew release. Local WC01 development uses `pnpm mcp:certscore`.
+Status: public developer preview. Version 0.2.12 adds the focused hosted CertScore Light workflow and current remote registry metadata. Local WC01 development uses `pnpm mcp:certscore`.
 
 Public docs:
 
@@ -66,8 +66,15 @@ For low-volume agent discovery without account or OAuth setup, use the unauthent
 https://mcp.certscore.ai/mcp/anonymous
 ```
 
-It exposes the same public-safe tool surface and preserves the existing limit of 10 new scans per requester IP per UTC day. Reusing an
-eligible recent result does not consume the quota. Use the OAuth endpoint or a scoped API key for higher-volume workflows.
+For the simplest no-account workflow, use CertScore Light:
+
+```text
+https://mcp.certscore.ai/mcp/light
+```
+
+Light exposes only `scan_site`, `get_scan_status`, and `get_scan_bundle`. The allowance is 20 new scans per requester IP per UTC day.
+Eligible recent-result reuse does not consume the allowance. Every no-account response includes the higher-volume contact path at
+`support@certscore.ai`.
 
 ## Configuration
 
@@ -149,7 +156,7 @@ curl -X POST https://certscore.ai/api/v2/scans \
   -d '{"url":"https://example.com","freshness":"latest","scanFrom":"eu_ie"}'
 ```
 
-New anonymous scans are limited to 10 per requester IP per UTC day. Reusing an eligible recent result does not consume the quota. Poll the returned status resource, then retrieve findings or evidence. Use OAuth or a scoped API key for repeated or higher-volume workflows.
+New anonymous scans are limited to 20 per requester IP per UTC day. Reusing an eligible recent result does not consume the quota. Poll the returned status resource, then retrieve findings or evidence. Contact `support@certscore.ai` for a higher-volume allowance, including when reuse serves the current request.
 
 ## MCP Client Examples
 

package/dist/certscore-mcp.mjs

@@ -20333,6 +20333,8 @@ var apiV2ScanCreationMetadataShape = {
   anonymousQuotaLimit: external_exports2.number().int().min(0).nullable().optional(),
   anonymousQuotaRemaining: external_exports2.number().int().min(0).nullable().optional(),
   anonymousQuotaResetAt: external_exports2.string().nullable().optional(),
+  upgradeSupportEmail: external_exports2.string().email().nullable().optional(),
+  upgradeMessage: external_exports2.string().nullable().optional(),
   recommendedNextTool: external_exports2.enum(["get_scan_status", "get_scan_bundle"]).optional()
 };
 var apiV2LinksSchema = external_exports2.object({
@@ -33123,7 +33125,9 @@ function scanCreationMetadata(value) {
     quotaConsumed: value.quotaConsumed,
     anonymousQuotaLimit: value.anonymousQuotaLimit,
     anonymousQuotaRemaining: value.anonymousQuotaRemaining,
-    anonymousQuotaResetAt: value.anonymousQuotaResetAt
+    anonymousQuotaResetAt: value.anonymousQuotaResetAt,
+    upgradeSupportEmail: value.upgradeSupportEmail,
+    upgradeMessage: value.upgradeMessage
   };
 }
 function toolContract(name) {
@@ -33152,7 +33156,14 @@ function createCertScoreMcpServer(options = {}) {
     name: "certscore",
     version: CERTSCORE_MCP_VERSION
   });
-  const registerTool = server.registerTool.bind(server);
+  const lightTools = /* @__PURE__ */ new Set(["scan_site", "get_scan_status", "get_scan_bundle"]);
+  const registerMcpTool = server.registerTool.bind(server);
+  const registerTool = (name, contract, handler) => {
+    if (options.toolProfile === "light" && !lightTools.has(name)) {
+      return;
+    }
+    registerMcpTool(name, contract, handler);
+  };
   async function createPulseScanTool(input) {
     const result = await client.submitScan(input.url, {
       detail: normalizeDetail2(input.detail),

package/dist/server.d.ts

@@ -5,6 +5,7 @@ export interface CertScoreMcpOptions {
     forwardedClientIp?: string | null;
     anonymousRequesterSecret?: string | null;
     timeout?: number;
+    toolProfile?: "full" | "light";
 }
 export declare function createCertScoreMcpServer(options?: CertScoreMcpOptions): McpServer;
 //# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAIpE,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAsDD,wBAAgB,wBAAwB,CAAC,OAAO,GAAE,mBAAwB,aAoSzE"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAIpE,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CAChC;AAwDD,wBAAgB,wBAAwB,CAAC,OAAO,GAAE,mBAAwB,aA2SzE"}

package/dist/server.js

@@ -14,7 +14,9 @@ function scanCreationMetadata(value) {
         quotaConsumed: value.quotaConsumed,
         anonymousQuotaLimit: value.anonymousQuotaLimit,
         anonymousQuotaRemaining: value.anonymousQuotaRemaining,
-        anonymousQuotaResetAt: value.anonymousQuotaResetAt
+        anonymousQuotaResetAt: value.anonymousQuotaResetAt,
+        upgradeSupportEmail: value.upgradeSupportEmail,
+        upgradeMessage: value.upgradeMessage
     };
 }
 function toolContract(name) {
@@ -43,7 +45,14 @@ export function createCertScoreMcpServer(options = {}) {
         name: "certscore",
         version: CERTSCORE_MCP_VERSION
     });
-    const registerTool = server.registerTool.bind(server);
+    const lightTools = new Set(["scan_site", "get_scan_status", "get_scan_bundle"]);
+    const registerMcpTool = server.registerTool.bind(server);
+    const registerTool = (name, contract, handler) => {
+        if (options.toolProfile === "light" && !lightTools.has(name)) {
+            return;
+        }
+        registerMcpTool(name, contract, handler);
+    };
     async function createPulseScanTool(input) {
         const result = await client.submitScan(input.url, {
             detail: normalizeDetail(input.detail),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@certscore/mcp",
-  "version": "0.2.11",
+  "version": "0.2.12",
   "mcpName": "ai.certscore/mcp",
   "private": false,
   "description": "MCP server for CertScore public website risk-signal workflows.",
@@ -31,7 +31,8 @@
     "dist",
     "README.md",
     "LICENSE",
-    "server.json"
+    "server.json",
+    "server-light.json"
   ],
   "publishConfig": {
     "access": "public"
@@ -46,14 +47,6 @@
     "url": "https://certscore.ai/contact",
     "email": "support@certscore.ai"
   },
-  "scripts": {
-    "build": "tsc -p tsconfig.json && esbuild src/index.ts --bundle --platform=node --format=esm --target=node20 --banner:js='#!/usr/bin/env node' --outfile=dist/certscore-mcp.mjs",
-    "bundle": "esbuild src/index.ts --bundle --platform=node --format=esm --target=node20 --banner:js='#!/usr/bin/env node' --outfile=dist/certscore-mcp.mjs",
-    "typecheck": "tsc --noEmit -p tsconfig.json",
-    "test": "node --import tsx --test src/*.test.ts",
-    "prepack": "pnpm run build",
-    "clean": "rm -rf dist"
-  },
   "keywords": [
     "certscore",
     "pulse",
@@ -67,7 +60,14 @@
     "zod": "^3.25.76"
   },
   "devDependencies": {
-    "@certscore/api-contracts": "workspace:*",
-    "@certscore/sdk": "workspace:*"
+    "@certscore/api-contracts": "0.1.0",
+    "@certscore/sdk": "0.2.6"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json && esbuild src/index.ts --bundle --platform=node --format=esm --target=node20 --banner:js='#!/usr/bin/env node' --outfile=dist/certscore-mcp.mjs",
+    "bundle": "esbuild src/index.ts --bundle --platform=node --format=esm --target=node20 --banner:js='#!/usr/bin/env node' --outfile=dist/certscore-mcp.mjs",
+    "typecheck": "tsc --noEmit -p tsconfig.json",
+    "test": "node --import tsx --test src/*.test.ts",
+    "clean": "rm -rf dist"
   }
-}
+}

package/server-light.json

@@ -0,0 +1,19 @@
+{
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
+  "name": "ai.certscore/light",
+  "title": "CertScore Light",
+  "description": "No-account public website privacy risk scans with 20 new scans/day and free recent-result reuse.",
+  "status": "active",
+  "repository": {
+    "url": "https://github.com/ergoveritas1-alt/certscore.ai",
+    "source": "github"
+  },
+  "websiteUrl": "https://certscore.ai/developers/mcp",
+  "version": "0.2.12",
+  "remotes": [
+    {
+      "type": "streamable-http",
+      "url": "https://mcp.certscore.ai/mcp/light"
+    }
+  ]
+}

package/server.json

@@ -1,19 +1,26 @@
 {
-  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-07-09/server.schema.json",
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
   "name": "ai.certscore/mcp",
+  "title": "CertScore",
   "description": "MCP server for CertScore public website risk-signal workflows.",
   "status": "active",
   "repository": {
     "url": "https://github.com/ergoveritas1-alt/certscore.ai",
     "source": "github"
   },
-  "version": "0.2.11",
+  "version": "0.2.12",
+  "remotes": [
+    {
+      "type": "streamable-http",
+      "url": "https://mcp.certscore.ai/mcp"
+    }
+  ],
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@certscore/mcp",
-      "version": "0.2.11",
+      "version": "0.2.12",
       "transport": {
         "type": "stdio"
       },