@daghis/teamcity-mcp 1.13.1 → 2.0.0

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## [2.0.0](https://github.com/Daghis/teamcity-mcp/compare/teamcity-mcp-v1.13.1...teamcity-mcp-v2.0.0) (2025-12-22)
+
+
+### ⚠ BREAKING CHANGES
+
+* 15 tools moved from Dev mode to Full-only mode.
+
+### Features
+
+* reduce dev mode tool surface ([#332](https://github.com/Daghis/teamcity-mcp/issues/332)) ([3a2bd6d](https://github.com/Daghis/teamcity-mcp/commit/3a2bd6dd72cc4b2d8c5cca1bb22867b1c7e19d12))
+
 ## [1.13.1](https://github.com/Daghis/teamcity-mcp/compare/teamcity-mcp-v1.13.0...teamcity-mcp-v1.13.1) (2025-12-22)
 
 

package/README.md

@@ -15,7 +15,7 @@ The TeamCity MCP Server allows developers using AI-powered coding assistants (Cl
 
 ### 🚀 Two Operational Modes
 
-- **Dev Mode**: Safe CI/CD operations
+- **Dev Mode** (default): Safe CI/CD operations
   - Trigger builds
   - Monitor build status and progress
   - Fetch build logs
@@ -30,6 +30,8 @@ The TeamCity MCP Server allows developers using AI-powered coding assistants (Cl
   - Set up new projects
   - Modify infrastructure settings
 
+See the [Tools Mode Matrix](docs/mcp-tools-mode-matrix.md) for the complete list of 77 tools and their availability by mode.
+
 ### 🎯 Key Capabilities
 
 - Trigger and monitor builds, fetch logs, and inspect test failures
@@ -295,9 +297,33 @@ We welcome contributions! Please see [CONTRIBUTING.md](CONTRIBUTING.md) for deta
 
 ## Security
 
-- Configure `TEAMCITY_TOKEN` via environment (see `.env.example`); never commit real tokens
-- Token-based authentication only
-- Logs redact sensitive values
+### Token Management
+
+- Configure `TEAMCITY_TOKEN` via environment variable or config file (see `.env.example`); never commit real tokens
+- Use a token with minimal required permissions; read-only tokens work for most Dev mode operations
+- Token-based authentication only; the MCP server does not support username/password
+- Logs redact sensitive values including tokens
+
+### Mode Selection
+
+- Prefer **Dev mode** unless Full mode is explicitly needed—this limits the blast radius of any misconfiguration or prompt injection
+- Full mode enables destructive operations (project deletion, agent management) that cannot be easily undone
+
+### Network Security
+
+- Always use HTTPS for TeamCity connections; the server does not enforce this but strongly recommends it
+- The MCP server connects only to the configured TeamCity URL; no other network calls are made
+
+### AI Assistant Considerations
+
+- AI assistants could be manipulated via prompt injection in build logs, test output, or other TeamCity data
+- Dev mode's limited tool set reduces the impact of such attacks
+- All actions appear in TeamCity's audit log under the token's associated user
+- Build logs and test failure details may contain sensitive information (secrets, paths, internal URLs) that become visible to the AI assistant
+
+### Repository Security
+
+This repository has GitHub secret scanning and push protection enabled. See [SECURITY.md](SECURITY.md) for vulnerability reporting.
 
 ## Support
 
@@ -309,6 +335,7 @@ We welcome contributions! Please see [CONTRIBUTING.md](CONTRIBUTING.md) for deta
 - JetBrains TeamCity for the excellent CI/CD platform
 - Anthropic for the Model Control Protocol specification
 - The open-source community for continuous support
+- See [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md) for third-party licenses
 
 ---
 

package/dist/index.js

@@ -1195,7 +1195,7 @@ function debug2(message, meta) {
 // package.json
 var package_default = {
   name: "@daghis/teamcity-mcp",
-  version: "1.13.1",
+  version: "2.0.0",
   description: "Model Control Protocol server for TeamCity CI/CD integration with AI coding assistants",
   mcpName: "io.github.Daghis/teamcity",
   main: "dist/index.js",
@@ -39982,7 +39982,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   {
     name: "get_vcs_root",
@@ -40013,7 +40014,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   {
     name: "set_vcs_root_property",
@@ -40373,7 +40375,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   // === Agent Compatibility (read-only lookups) ===
   {
@@ -40396,7 +40399,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   {
     name: "get_incompatible_build_types_for_agent",
@@ -40418,7 +40422,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   {
     name: "get_agent_enabled_info",
@@ -40440,7 +40445,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   {
     name: "get_compatible_agents_for_build_type",
@@ -40474,7 +40480,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   {
     name: "count_compatible_agents_for_build_type",
@@ -40509,7 +40516,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   {
     name: "get_compatible_agents_for_queued_build",
@@ -40546,7 +40554,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   {
     name: "check_teamcity_connection",
@@ -40556,7 +40565,8 @@ var DEV_TOOLS = [
       const adapter = createAdapterFromTeamCityAPI(TeamCityAPI.getInstance());
       const ok = await adapter.testConnection();
       return json({ ok });
-    }
+    },
+    mode: "full"
   },
   // === Agent Tools ===
   {
@@ -40617,7 +40627,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   {
     name: "list_agent_pools",
@@ -40677,7 +40688,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   // === Additional Tools from Complex Implementation ===
   // Build Analysis Tools
@@ -41487,7 +41499,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   {
     name: "list_users",
@@ -41551,7 +41564,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   {
     name: "list_roles",
@@ -41578,7 +41592,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   {
     name: "list_branches",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@daghis/teamcity-mcp",
-  "version": "1.13.1",
+  "version": "2.0.0",
   "description": "Model Control Protocol server for TeamCity CI/CD integration with AI coding assistants",
   "mcpName": "io.github.Daghis/teamcity",
   "main": "dist/index.js",

package/server.json

@@ -7,13 +7,13 @@
     "source": "github"
   },
   "websiteUrl": "https://github.com/Daghis/teamcity-mcp",
-  "version": "1.13.1",
+  "version": "2.0.0",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@daghis/teamcity-mcp",
-      "version": "1.13.1",
+      "version": "2.0.0",
       "runtimeHint": "npx",
       "runtimeArguments": [
         {