@daghis/teamcity-mcp 1.13.1 → 2.0.1

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## [2.0.1](https://github.com/Daghis/teamcity-mcp/compare/teamcity-mcp-v2.0.0...teamcity-mcp-v2.0.1) (2025-12-23)
+
+
+### Bug Fixes
+
+* resolve HTTP 400 when updating artifactRules via update_build_config ([#335](https://github.com/Daghis/teamcity-mcp/issues/335)) ([21614ad](https://github.com/Daghis/teamcity-mcp/commit/21614ad9af4e7a519a0ece0d7c41b90a10f74a73))
+
+## [2.0.0](https://github.com/Daghis/teamcity-mcp/compare/teamcity-mcp-v1.13.1...teamcity-mcp-v2.0.0) (2025-12-22)
+
+
+### ⚠ BREAKING CHANGES
+
+* 15 tools moved from Dev mode to Full-only mode.
+
+### Features
+
+* reduce dev mode tool surface ([#332](https://github.com/Daghis/teamcity-mcp/issues/332)) ([3a2bd6d](https://github.com/Daghis/teamcity-mcp/commit/3a2bd6dd72cc4b2d8c5cca1bb22867b1c7e19d12))
+
 ## [1.13.1](https://github.com/Daghis/teamcity-mcp/compare/teamcity-mcp-v1.13.0...teamcity-mcp-v1.13.1) (2025-12-22)
 
 

package/README.md

@@ -15,7 +15,7 @@ The TeamCity MCP Server allows developers using AI-powered coding assistants (Cl
 
 ### 🚀 Two Operational Modes
 
-- **Dev Mode**: Safe CI/CD operations
+- **Dev Mode** (default): Safe CI/CD operations
   - Trigger builds
   - Monitor build status and progress
   - Fetch build logs
@@ -30,6 +30,8 @@ The TeamCity MCP Server allows developers using AI-powered coding assistants (Cl
   - Set up new projects
   - Modify infrastructure settings
 
+See the [Tools Mode Matrix](docs/mcp-tools-mode-matrix.md) for the complete list of 77 tools and their availability by mode.
+
 ### 🎯 Key Capabilities
 
 - Trigger and monitor builds, fetch logs, and inspect test failures
@@ -295,9 +297,33 @@ We welcome contributions! Please see [CONTRIBUTING.md](CONTRIBUTING.md) for deta
 
 ## Security
 
-- Configure `TEAMCITY_TOKEN` via environment (see `.env.example`); never commit real tokens
-- Token-based authentication only
-- Logs redact sensitive values
+### Token Management
+
+- Configure `TEAMCITY_TOKEN` via environment variable or config file (see `.env.example`); never commit real tokens
+- Use a token with minimal required permissions; read-only tokens work for most Dev mode operations
+- Token-based authentication only; the MCP server does not support username/password
+- Logs redact sensitive values including tokens
+
+### Mode Selection
+
+- Prefer **Dev mode** unless Full mode is explicitly needed—this limits the blast radius of any misconfiguration or prompt injection
+- Full mode enables destructive operations (project deletion, agent management) that cannot be easily undone
+
+### Network Security
+
+- Always use HTTPS for TeamCity connections; the server does not enforce this but strongly recommends it
+- The MCP server connects only to the configured TeamCity URL; no other network calls are made
+
+### AI Assistant Considerations
+
+- AI assistants could be manipulated via prompt injection in build logs, test output, or other TeamCity data
+- Dev mode's limited tool set reduces the impact of such attacks
+- All actions appear in TeamCity's audit log under the token's associated user
+- Build logs and test failure details may contain sensitive information (secrets, paths, internal URLs) that become visible to the AI assistant
+
+### Repository Security
+
+This repository has GitHub secret scanning and push protection enabled. See [SECURITY.md](SECURITY.md) for vulnerability reporting.
 
 ## Support
 
@@ -309,6 +335,7 @@ We welcome contributions! Please see [CONTRIBUTING.md](CONTRIBUTING.md) for deta
 - JetBrains TeamCity for the excellent CI/CD platform
 - Anthropic for the Model Control Protocol specification
 - The open-source community for continuous support
+- See [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md) for third-party licenses
 
 ---
 

package/dist/index.js

@@ -1195,7 +1195,7 @@ function debug2(message, meta) {
 // package.json
 var package_default = {
   name: "@daghis/teamcity-mcp",
-  version: "1.13.1",
+  version: "2.0.1",
   description: "Model Control Protocol server for TeamCity CI/CD integration with AI coding assistants",
   mcpName: "io.github.Daghis/teamcity",
   main: "dist/index.js",
@@ -2327,8 +2327,6 @@ var BuildConfigurationCloneManager = class {
 };
 
 // src/teamcity/build-configuration-update-manager.ts
-var ARTIFACT_RULES_SETTINGS_FIELD = "settings/artifactRules";
-var ARTIFACT_RULES_LEGACY_FIELD = "artifactRules";
 var isArtifactRulesRetryableError = (error3) => {
   if (error3 == null || typeof error3 !== "object") return false;
   if (!("response" in error3)) return false;
@@ -2336,9 +2334,12 @@ var isArtifactRulesRetryableError = (error3) => {
   const status = response?.status;
   return status === 400 || status === 404;
 };
-var setArtifactRulesWithFallback = async (api, buildTypeId, artifactRules) => {
+var setArtifactRulesWithFallback = async (http, buildTypeId, artifactRules) => {
+  const encodedId = encodeURIComponent(buildTypeId);
   try {
-    await api.setBuildTypeField(buildTypeId, ARTIFACT_RULES_SETTINGS_FIELD, artifactRules);
+    await http.put(`/app/rest/buildTypes/${encodedId}/settings/artifactRules`, artifactRules, {
+      headers: { "Content-Type": "text/plain" }
+    });
   } catch (err) {
     if (!isArtifactRulesRetryableError(err)) {
       throw err;
@@ -2349,7 +2350,9 @@ var setArtifactRulesWithFallback = async (api, buildTypeId, artifactRules) => {
       status
     });
     try {
-      await api.setBuildTypeField(buildTypeId, ARTIFACT_RULES_LEGACY_FIELD, artifactRules);
+      await http.put(`/app/rest/buildTypes/${encodedId}/artifactRules`, artifactRules, {
+        headers: { "Content-Type": "text/plain" }
+      });
     } catch (fallbackError) {
       debug2("Legacy artifact rules update failed", {
         buildTypeId,
@@ -2569,11 +2572,7 @@ var BuildConfigurationUpdateManager = class {
       if (settings.length > 0) {
         for (const setting of settings) {
           if (setting.name === "artifactRules") {
-            await setArtifactRulesWithFallback(
-              this.client.modules.buildTypes,
-              currentConfig.id,
-              setting.value
-            );
+            await setArtifactRulesWithFallback(this.client.http, currentConfig.id, setting.value);
             continue;
           }
           await this.client.modules.buildTypes.setBuildTypeField(
@@ -39982,7 +39981,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   {
     name: "get_vcs_root",
@@ -40013,7 +40013,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   {
     name: "set_vcs_root_property",
@@ -40373,7 +40374,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   // === Agent Compatibility (read-only lookups) ===
   {
@@ -40396,7 +40398,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   {
     name: "get_incompatible_build_types_for_agent",
@@ -40418,7 +40421,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   {
     name: "get_agent_enabled_info",
@@ -40440,7 +40444,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   {
     name: "get_compatible_agents_for_build_type",
@@ -40474,7 +40479,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   {
     name: "count_compatible_agents_for_build_type",
@@ -40509,7 +40515,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   {
     name: "get_compatible_agents_for_queued_build",
@@ -40546,7 +40553,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   {
     name: "check_teamcity_connection",
@@ -40556,7 +40564,8 @@ var DEV_TOOLS = [
       const adapter = createAdapterFromTeamCityAPI(TeamCityAPI.getInstance());
       const ok = await adapter.testConnection();
       return json({ ok });
-    }
+    },
+    mode: "full"
   },
   // === Agent Tools ===
   {
@@ -40617,7 +40626,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   {
     name: "list_agent_pools",
@@ -40677,7 +40687,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   // === Additional Tools from Complex Implementation ===
   // Build Analysis Tools
@@ -41487,7 +41498,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   {
     name: "list_users",
@@ -41551,7 +41563,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   {
     name: "list_roles",
@@ -41578,7 +41591,8 @@ var DEV_TOOLS = [
         },
         args
       );
-    }
+    },
+    mode: "full"
   },
   {
     name: "list_branches",
@@ -42010,7 +42024,7 @@ var FULL_MODE_TOOLS = [
           }
           if (typedArgs.artifactRules !== void 0) {
             await setArtifactRulesWithFallback(
-              adapter.modules.buildTypes,
+              adapter.http,
               typedArgs.buildTypeId,
               typedArgs.artifactRules
             );
@@ -42033,7 +42047,7 @@ var FULL_MODE_TOOLS = [
         }
         if (typedArgs.artifactRules !== void 0) {
           await setArtifactRulesWithFallback(
-            adapter.modules.buildTypes,
+            adapter.http,
             typedArgs.buildTypeId,
             typedArgs.artifactRules
           );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@daghis/teamcity-mcp",
-  "version": "1.13.1",
+  "version": "2.0.1",
   "description": "Model Control Protocol server for TeamCity CI/CD integration with AI coding assistants",
   "mcpName": "io.github.Daghis/teamcity",
   "main": "dist/index.js",

package/server.json

@@ -7,13 +7,13 @@
     "source": "github"
   },
   "websiteUrl": "https://github.com/Daghis/teamcity-mcp",
-  "version": "1.13.1",
+  "version": "2.0.1",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@daghis/teamcity-mcp",
-      "version": "1.13.1",
+      "version": "2.0.1",
       "runtimeHint": "npx",
       "runtimeArguments": [
         {