@intutic/mcp-governance-proxy 2.8.1 → 2.9.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +2 -2
  2. package/package.json +4 -4
package/README.md CHANGED
@@ -65,7 +65,7 @@ Built-in patterns only: there are no workspace-defined DLP patterns here (custom
65
65
  | Binary | Description |
66
66
  |--------|-------------|
67
67
  | `intutic-mcp-proxy` | Wraps an MCP server (stdio or remote), or with no server to wrap, runs the standalone `intutic` MCP server |
68
- | `intutic-mcp-daemon` | Long-lived local daemon on a Unix socket (`~/.intutic/mcp-proxy.sock`, or `MCP_DAEMON_SOCKET`) that caches policy and batches telemetry for proxies running with `INTUTIC_MCP_PROXY_MODE=daemon` (read from `~/.intutic/env/runtime.env` only, which `intutic connect` writes from the workspace's `mcpProxyMode` setting). Its shared Valkey policy cache is keyed per caller (workspace, policy generation and a hash of the daemon's API key). Not an MCP server. |
68
+ | `intutic-mcp-daemon` | Long-lived local daemon on a Unix socket (`~/.intutic/mcp-proxy.sock`, or `MCP_DAEMON_SOCKET`) that caches policy and batches telemetry for proxies running with `INTUTIC_MCP_PROXY_MODE=daemon` (read from `~/.intutic/env/runtime.env` only, which the sync daemon writes from a control-plane workspace's `mcpProxyMode` setting). Its shared Valkey policy cache is keyed per caller (workspace, policy generation and a hash of the daemon's API key). Not an MCP server. |
69
69
 
70
70
  ## Installation
71
71
 
@@ -120,7 +120,7 @@ The package has two binaries, so `npx` needs `-p @intutic/mcp-governance-proxy`
120
120
 
121
121
  `--remote-transport` accepts `sse` or `http` (default `http`, the SDK's current non-deprecated `StreamableHTTPClientTransport`). `--remote-url` and a positional stdio command (`--` followed by a command) are mutually exclusive — pass one or the other. Auth headers ride via the `INTUTIC_REMOTE_HEADERS` environment variable (a JSON object string), never as a CLI argument — argv is visible to any local process via `ps`.
122
122
 
123
- `--server-name` is the name the registry, the server allowlist and the TOFU pin file (`~/.intutic/mcp-pins/<workspace>__<server>.json`) know the server by; without it the server is `unknown`. `intutic connect` sets it when it wraps a harness's servers. Every environment variable and flag is listed in the [MCP Server Governance guide](https://docs.intutic.ai/guide/mcp-governance#configuration-reference).
123
+ `--server-name` is the name the registry, the server allowlist and the TOFU pin file (`~/.intutic/mcp-pins/<workspace>__<server>.json`) know the server by; without it the server is `unknown`. Intutic sets it when it wraps a harness's servers. Every environment variable and flag is listed in the [MCP Server Governance guide](https://docs.intutic.ai/guide/mcp-governance#configuration-reference).
124
124
 
125
125
  ## Part of Intutic
126
126
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@intutic/mcp-governance-proxy",
3
- "version": "2.8.1",
3
+ "version": "2.9.0",
4
4
  "description": "Intutic MCP Governance Proxy — transparent stdio proxy that intercepts all tools/call JSON-RPC messages and applies workspace SOP policy before forwarding to real MCP servers",
5
5
  "type": "module",
6
6
  "license": "MIT",
@@ -33,9 +33,9 @@
33
33
  "@opentelemetry/semantic-conventions": "^1.43.0",
34
34
  "ioredis": "^5",
35
35
  "zod": "^3",
36
- "@intutic/id": "2.8.1",
37
- "@intutic/logger": "2.8.1",
38
- "@intutic/shared-types": "2.8.1"
36
+ "@intutic/id": "2.9.0",
37
+ "@intutic/shared-types": "2.9.0",
38
+ "@intutic/logger": "2.9.0"
39
39
  },
40
40
  "devDependencies": {
41
41
  "@types/node": "^22",