@guardbee/mcp-prompt-leak-scanner 1.1.0 → 1.1.1

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @guardbee/mcp-prompt-leak-scanner
 
+## 1.1.1
+
+### Patch Changes
+
+- [#247](https://github.com/GuardBee/guardbee-mcp/pull/247) [`30cc59d`](https://github.com/GuardBee/guardbee-mcp/commit/30cc59d169b9e0146e5ca785de7536c4dc4e98b9) Thanks [@4hmetuyar](https://github.com/4hmetuyar)! - Tool schemas are now declared with `z.object(...)` instead of raw Zod shapes, which MCP SDK v2 deprecates. The JSON Schema sent to clients is unchanged.
+
 ## 1.1.0
 
 ### Minor Changes

package/dist/server.js

@@ -40,28 +40,28 @@ export async function startServer() {
 export function registerTools(server) {
     server.registerTool("scan_text", {
         description: "Scan a raw text string (e.g. a prompt you're about to send to an LLM) for leaked credentials (API keys, private keys, JWTs) and PII (TC Kimlik No, credit card, IBAN, email, phone) — checksum-validated where applicable to keep false positives low.",
-        inputSchema: {
+        inputSchema: z.object({
             content: z.string().describe("The text to scan"),
             label: z.string().optional().describe("Optional label shown in findings"),
-        },
+        }),
     }, async ({ content, label }) => {
         const findings = scanText(content, label);
         return { content: [{ type: "text", text: formatFindings(findings, 1, 0) }] };
     });
     server.registerTool("scan_messages", {
         description: "Scan an OpenAI/Anthropic-style chat request body (a JSON object with a `messages` array and/or a `system` field) for leaked credentials and PII in every message's text content, before it would be sent to the model.",
-        inputSchema: {
+        inputSchema: z.object({
             body: z.record(z.string(), z.unknown()).describe("The chat request body object, e.g. { model, system, messages: [{ role, content }] }"),
-        },
+        }),
     }, async ({ body }) => {
         const { findings } = scanBody(body);
         return { content: [{ type: "text", text: formatFindings(findings, 1, 0) }] };
     });
     server.registerTool("scan_file", {
         description: "Scan a single file — plain text, or a JSON chat-request-body fixture (auto-detected) — for leaked credentials and PII",
-        inputSchema: {
+        inputSchema: z.object({
             path: z.string().describe("Absolute or relative path to the file to scan"),
-        },
+        }),
     }, async ({ path: filePath }) => {
         const { findings, skipped } = scanFile(filePath);
         if (skipped) {
@@ -71,12 +71,12 @@ export function registerTools(server) {
     });
     server.registerTool("scan_directory", {
         description: "Recursively scan a directory of prompt logs or request-body fixtures for leaked credentials and PII",
-        inputSchema: {
+        inputSchema: z.object({
             path: z.string().describe("Absolute or relative path to the directory to scan"),
             maxFiles: z.number().int().positive().optional().describe("Maximum number of files to scan (default: 5000)"),
             include: z.array(z.string()).optional().describe("Only scan files whose path contains one of these strings"),
             exclude: z.array(z.string()).optional().describe("Skip files/dirs whose path contains one of these strings"),
-        },
+        }),
     }, async ({ path: dirPath, maxFiles, include, exclude }) => {
         const result = scanDirectory(dirPath, { maxFiles, include, exclude });
         return { content: [{ type: "text", text: formatFindings(result.findings, result.scannedFiles, result.durationMs) }] };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@guardbee/mcp-prompt-leak-scanner",
-  "version": "1.1.0",
+  "version": "1.1.1",
   "mcpName": "io.github.GuardBee/prompt-leak-scanner",
   "description": "PII and secret leak scanner for LLM prompts: catches API keys, TC Kimlik No, cards and IBANs in outbound prompts before they leave your app; MCP server and reverse proxy",
   "type": "module",