@hasna/mcps 0.0.15 → 0.0.16

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -27,6 +27,8 @@ mcps --help
27
27
  - `mcps call`
28
28
  - `mcps info`
29
29
  - `mcps doctor`
30
+ - `mcps env list <server-id>`
31
+ - `mcps env ref <server-id> API_KEY=UPSTREAM_API_KEY --source env`
30
32
  - `mcps machines list`
31
33
  - `mcps machines add --host spark01 --platform linux --arch arm64`
32
34
  - `mcps machines seed-defaults`
@@ -53,6 +55,25 @@ Notes:
53
55
  - Targets need SSH access plus `node` and either `bun` or `npm` available remotely.
54
56
  - Use `-j` or `--json` on the new `machines` and `fleet` commands for scriptable output.
55
57
 
58
+ ## Credential References
59
+
60
+ Secret-like environment keys and values are rejected from plain server env storage.
61
+ Use credential references instead so exports, MCP tools, API responses, logs, and
62
+ diagnostics never contain raw credential values.
63
+
64
+ ```bash
65
+ mcps add --yes --name notion npx -y @notion/mcp --credential-env NOTION_TOKEN=NOTION_TOKEN
66
+ mcps env ref notion API_KEY=UPSTREAM_API_KEY --source env
67
+ mcps env ref notion API_KEY=notion-token --source local-vault
68
+ mcps env ref notion API_KEY=cred_123 --source hosted
69
+ ```
70
+
71
+ Local runtime resolution supports `env` and `local-vault` references. The local
72
+ vault defaults to `~/.hasna/mcps/credentials.local.json`; set
73
+ `HASNA_MCPS_CREDENTIAL_VAULT_PATH` to use a different JSON file. Hosted
74
+ credential references are recorded for platforms that resolve credentials outside
75
+ the local runtime.
76
+
56
77
  ## MCP Server
57
78
 
58
79
  ```bash