@getmarrow/mcp 3.9.39 → 3.9.41

package/README.md

@@ -17,13 +17,15 @@ With `@getmarrow/mcp`, any MCP-compatible client can ask Marrow before risky wor
 
 ## Trust and Data Boundaries
 
-Marrow is tenant-aware by design. Private account, fleet, memory, workflow, and proof-pack data stays scoped to the authenticated account and authorized agent-bound keys. Shared/hive learning uses visibility-controlled, sanitized aggregate signals; it is not raw cross-customer decision sharing.
+Marrow is tenant-aware by design. Private account, fleet, workflow, proof-pack, and agent data stays scoped to the authenticated account and authorized agent-bound keys.
+
+Enterprise tenants receive a strong private governance baseline from day one: risk gates, proof requirements, workflow templates, private/account learning, and exact next actions. Teams that enable sanitized aggregate contribution unlock richer k-anonymous collective workflow guidance. Contribution never means raw prompts, decisions, proof packs, code, secrets, account identifiers, agent identifiers, or customer identities.
 
 For business pilots, review the live trust notes before production rollout: https://getmarrow.ai/docs#trust-boundaries
 
-## What's New in v3.9.39
+## What's New in v3.9.40
 
-v3.9.39 adds MCP tools for Marrow's governance-control layer.
+v3.9.40 adds MCP tools for Marrow's governance-control layer.
 
 - `marrow_governance_control_plane` returns Marrow's cross-harness control-plane contract.
 - `marrow_hermes_integration` maps Hermes `/goal`, verification evidence, `/learn`, `/journey`, and background subagents into Marrow proof/outcome workflows.
@@ -34,6 +36,17 @@ v3.9.39 adds MCP tools for Marrow's governance-control layer.
 
 ---
 
+## Current Backend Surfaces
+
+The Marrow API also exposes two agent-facing surfaces that help MCP clients and operators verify whether passive capture is producing useful fleet data:
+
+- `GET /v1/agent/data-quality` returns an authenticated attribution scorecard for the current account or bound agent, including `agent_id`, `source_meta`, harness/client, workflow type, outcome closure, and non-trivial data coverage.
+- `GET /v1/agent/integrations/{client}` returns a per-harness setup guide for supported clients such as Codex, Claude Code, Cursor, Composer, Windsurf, Cline, OpenCode, Hermes, OpenClaw, Gemini, Grok, DeepSeek, Qwen, Kimi, MiniMax, GLM, MCP clients, CI runners, and custom harnesses.
+
+These endpoints are protected by Marrow API-key or agent-bound-key auth and are documented in the source-of-truth docs at [getmarrow.ai/docs](https://getmarrow.ai/docs/).
+
+---
+
 ## Start Here
 
 For most agents and new users, start with the universal installer:
@@ -396,7 +409,8 @@ Convert a detected recurring pattern into an enforced workflow. Pattern ID comes
 
 `marrow_think` surfaces three additional fields when the backend provides them:
 - `onboarding_hint` — contextual tip for new accounts
-- `intelligence.collective` — anonymized insights aggregated across all Marrow accounts (k-anonymity ≥5 accounts per insight)
+- `intelligence.collective` — entitlement-gated, k-anonymous aggregate patterns when the tenant contributes sanitized aggregate signals and the minimum-account threshold is met
+- `curated_baseline_guidance` — strong private baseline guidance for private or non-contributing tenants
 - `intelligence.team_context` — recent decisions from other sessions in the same account, so multi-agent teams stay aware of each other's work
 
 ---
@@ -699,7 +713,7 @@ npx @getmarrow/install doctor
 Deep doctor with harmless write/outcome verification:
 
 ```bash
-MARROW_API_KEY=mrw_live_... npx @getmarrow/install doctor --self-test
+MARROW_API_KEY=<your_marrow_key> npx @getmarrow/install doctor --self-test
 ```
 
 Healthy output should confirm `key valid: yes`, `account active: yes`, `agent identity accepted: yes`, `write test event: passed`, and `outcome closed: passed`. If it fails, Marrow returns the exact reason and fix command.
@@ -708,7 +722,7 @@ Stable project-local key file:
 
 ```bash
 mkdir -p .marrow
-printf "MARROW_API_KEY=mrw_live_...\\n" > .marrow/env
+printf "MARROW_API_KEY=<your_marrow_key>\\n" > .marrow/env
 chmod 600 .marrow/env
 npx @getmarrow/mcp setup
 ```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getmarrow/mcp",
-  "version": "3.9.39",
+  "version": "3.9.41",
   "description": "Governance, proof, and intelligence controls for MCP-compatible agent fleets.",
   "bin": {
     "marrow-mcp": "dist/cli.js"
@@ -42,7 +42,7 @@
   ],
   "repository": {
     "type": "git",
-    "url": "https://github.com/MajinBuu0x9/marrow-mcp.git"
+    "url": "git+https://github.com/getmarrow/marrow-mcp.git"
   },
   "license": "MIT",
   "files": [
@@ -50,7 +50,7 @@
     "README.md"
   ],
   "dependencies": {
-    "@getmarrow/sdk": "^3.7.38"
+    "@getmarrow/sdk": "^3.7.40"
   },
   "devDependencies": {
     "@types/node": "^25.5.2",