@ductape/mcp 0.2.35 → 0.2.36

package/dist/index.js

@@ -3105,6 +3105,9 @@ CONNECTION FILE — REQUIRED SHAPE:
       "product_env_slug": "prd",
       "app_env_slug": "production",
       "variables": [{ "key": "region", "value": "ng" }],
+      "credentials": {
+        "headers:Authorization": "$Secret{PAYSTACK_SECRET_KEY}"
+      },
       "auth": {
         "auth_tag": "secret-key",
         "data": {
@@ -3115,6 +3118,12 @@ CONNECTION FILE — REQUIRED SHAPE:
     }]
   }
 
+  Authentication is OPTIONAL. If the App defines an auth scheme, use auth with its exact auth_tag.
+  If it has no formal auth scheme but actions declare reusable credential fields, use credentials
+  with location-prefixed keys: headers:<key>, query:<key>, params:<key>, or body:<key>. Leave both
+  auth and credentials absent when the environment does not require authentication. Never create a
+  fake auth_tag merely to store a header.
+
   Before writing this file, inspect the exact App version/auth/action schemas. auth.data must have
   headers/query/params/body objects and must match the selected auth schema. Never guess an auth_tag,
   variable key, input location, or required field. Store credentials with secrets.create first and
@@ -3123,8 +3132,8 @@ CONNECTION FILE — REQUIRED SHAPE:
 CREATE/REPAIR/ROTATE:
   ductape_cli("products apps configure --product <product_tag> --app <app_or_access_tag> \
     --connection-file ductape/apps/<app_tag>/connection.json --json")
-  The command is merge-safe: an omitted auth or variables field preserves the existing saved field.
-  Providing auth or variables explicitly replaces that field for the named product environment.
+  The command is merge-safe: an omitted auth, credentials, or variables field preserves the existing
+  saved field. Providing one explicitly replaces that field for the named product environment.
   It never returns saved credential values. Include only environments intentionally being changed;
   other existing mappings are retained. To repair an old connection with no mapping, add its row.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ductape/mcp",
-  "version": "0.2.35",
+  "version": "0.2.36",
   "description": "MCP server that exposes Ductape SDK operations via the backend proxy",
   "type": "module",
   "main": "dist/index.js",