@inferencesh/sdk 0.29.1 → 0.30.0

package/CHANGELOG.md

@@ -7,6 +7,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.30.0] - 2026-10-18
+
+### Removed
+- `credentialId` on `httpTool().auth()` and `mcpTool()`, and the positional `mcpTool(name, credentialId, toolName)`: a tool no longer pins a connection. Credential-auth HTTP tools and MCP tools always sign in with the caller's own login to the provider at run time; `mcpTool(name, { server, toolName })` requires `server` (INF-1012). Generated types: `ToolAuthConfig`, `MCPToolConfig` and `MCPToolConfigDTO` lose `credential_id`.
+
 ## [0.29.0] - 2026-10-17
 
 ### Removed

package/README.md

@@ -377,7 +377,7 @@ Use the fluent builders to define `AgentTool` schemas. Client tools (`tool`) run
 | `agentTool(name, agentRef)` | Server | Delegate to a sub-agent |
 | `httpTool(name, url)` / `callTool(name, url)` | Server | HTTP request with credential injection (preferred over `webhookTool`) |
 | `webhookTool(name, url)` | Server | Unsigned webhook (legacy; use `httpTool` for new tools) |
-| `mcpTool(name, { server, toolName, credentialId? })` | Server | Call a tool on an MCP server (by slug), signed in through the server's provider; `credentialId` pins one connection. `mcpTool(name, credentialId, toolName)` still works and is saved with the connection's server |
+| `mcpTool(name, { server, toolName })` | Server | Call a tool on an MCP server (by slug), signed in with the runner's own connection to the server's provider |
 | `internalTools()` | Server | Built-in tools: plan, memory, widget, finish, skills, meta, remote, knowledge, artifact, agent |
 
 ```typescript
@@ -401,7 +401,7 @@ const clientTool = tool('get_weather')
 const gmailSend = httpTool('gmail_send', 'https://gmail.googleapis.com/gmail/v1/users/me/messages/send')
   .describe('Send an email via Gmail')
   .method('POST')
-  .auth({ credential: CredentialProviderGoogle, credentialId: 'your-credential-id' })
+  .auth({ credential: CredentialProviderGoogle })
   .build();
 
 // API key or bearer auth

package/dist/tool-builder.d.ts

@@ -100,13 +100,12 @@ declare class HTTPToolBuilder extends ToolBuilder {
     constructor(name: string, url: string);
     method(m: string): this;
     /**
-     * How the tool authenticates: `credential` sends a connected account's
-     * access token (pick the account with `credentialId`), `apiKey` / `bearer`
-     * send a vault secret.
+     * How the tool authenticates: `credential` sends the access token of the
+     * runner's own connection to that provider, `apiKey` / `bearer` send a
+     * vault secret.
      */
     auth(config: {
         credential?: string;
-        credentialId?: string;
         apiKey?: string;
         bearer?: string;
         header?: string;
@@ -131,24 +130,15 @@ export interface MCPToolTarget {
     /** The MCP server's slug (a workspace registration or a directory entry). */
     server: string;
     toolName: string;
-    /** Pins one connection to the server's provider; by default the runner's own is used. */
-    credentialId?: string;
 }
 /**
  * Create an MCP tool: `toolName` on the MCP server `target.server` (its slug).
- * The call signs in with the runner's connection to the server's provider;
- * `credentialId` pins one connection instead.
- *
- * The older form `mcpTool(name, credentialId, toolName)` (a string second
- * argument) still works: a tool naming only a connection is saved with the
- * server that connection's provider is declared by.
+ * The call signs in with the runner's own connection to the server's provider.
  */
-export declare function mcpTool(name: string, target: MCPToolTarget | string, toolName?: string): MCPToolBuilder;
+export declare function mcpTool(name: string, target: MCPToolTarget): MCPToolBuilder;
 declare class MCPToolBuilder extends ToolBuilder {
     private target;
-    constructor(name: string, target: Partial<MCPToolTarget> & {
-        toolName: string;
-    });
+    constructor(name: string, target: MCPToolTarget);
     build(): AgentTool;
 }
 declare class InternalToolsBuilder {

package/dist/tool-builder.js

@@ -184,13 +184,13 @@ class HTTPToolBuilder extends ToolBuilder {
         return this;
     }
     /**
-     * How the tool authenticates: `credential` sends a connected account's
-     * access token (pick the account with `credentialId`), `apiKey` / `bearer`
-     * send a vault secret.
+     * How the tool authenticates: `credential` sends the access token of the
+     * runner's own connection to that provider, `apiKey` / `bearer` send a
+     * vault secret.
      */
     auth(config) {
         if (config.credential) {
-            this.authConfig = { type: ToolAuthTypeCredential, provider: config.credential, credential_id: config.credentialId };
+            this.authConfig = { type: ToolAuthTypeCredential, provider: config.credential };
         }
         else if (config.apiKey) {
             this.authConfig = { type: ToolAuthTypeAPIKey, secret: config.apiKey, header: config.header || 'X-API-Key' };
@@ -238,17 +238,9 @@ export const httpTool = (name, url) => new HTTPToolBuilder(name, url);
 export const callTool = (name, url) => new HTTPToolBuilder(name, url);
 /**
  * Create an MCP tool: `toolName` on the MCP server `target.server` (its slug).
- * The call signs in with the runner's connection to the server's provider;
- * `credentialId` pins one connection instead.
- *
- * The older form `mcpTool(name, credentialId, toolName)` (a string second
- * argument) still works: a tool naming only a connection is saved with the
- * server that connection's provider is declared by.
+ * The call signs in with the runner's own connection to the server's provider.
  */
-export function mcpTool(name, target, toolName) {
-    if (typeof target === 'string') {
-        return new MCPToolBuilder(name, { toolName: toolName ?? '', credentialId: target });
-    }
+export function mcpTool(name, target) {
     return new MCPToolBuilder(name, target);
 }
 class MCPToolBuilder extends ToolBuilder {
@@ -264,9 +256,8 @@ class MCPToolBuilder extends ToolBuilder {
             type: ToolTypeMCP,
             require_approval: this.approval || undefined,
             mcp: {
+                server: this.target.server,
                 tool_name: this.target.toolName,
-                ...(this.target.server ? { server: this.target.server } : {}),
-                ...(this.target.credentialId ? { credential_id: this.target.credentialId } : {}),
             },
         };
     }

package/dist/types.d.ts

@@ -172,7 +172,6 @@ export declare const ToolAuthTypeBearer: ToolAuthType;
 export interface ToolAuthConfig {
     type: ToolAuthType;
     provider?: string;
-    credential_id?: string;
     secret?: string;
     header?: string;
 }
@@ -203,15 +202,12 @@ export interface HTTPToolConfig {
 /**
  * MCPToolConfig is a tool of an MCP server: the server by its slug (the
  * agent's team's registration, its org's or the directory's) and the tool
- * to call. CredentialID pins the connection the call signs in with; without
- * it the runner's connection to the server's provider is used. A tool
- * written with only a connection is saved with the server that
- * connection's provider is declared by.
+ * to call. Each call signs in with the runner's connection to the
+ * server's provider (Credential.ToolConnection).
  */
 export interface MCPToolConfig {
     server?: string;
     tool_name: string;
-    credential_id?: string;
 }
 export interface AppToolConfigDTO {
     ref: string;
@@ -264,7 +260,6 @@ export interface HTTPToolConfigDTO {
 export interface MCPToolConfigDTO {
     server: string;
     tool_name: string;
-    credential_id?: string;
 }
 /**
  * CoreAppConfigDTO references an app used as the agent's core

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inferencesh/sdk",
-  "version": "0.29.1",
+  "version": "0.30.0",
   "description": "Official JavaScript/TypeScript SDK for inference.sh - Run AI models with a simple API",
   "type": "module",
   "main": "dist/index.js",