@kakunin/mcp 0.2.0 → 0.2.1

package/README.md

@@ -1,5 +1,7 @@
 # @kakunin/mcp
 
+[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/nqzai/kakunin-mcp/badge)](https://scorecard.dev/viewer/?uri=github.com/nqzai/kakunin-mcp)
+
 Model Context Protocol server for the [Kakunin](https://kakunin.ai) AI agent compliance API. Lets AI agents self-verify scope, check their own risk score, and log behavioral events — all from within Claude, Cursor, or any MCP-compatible runtime.
 
 ```bash

package/dist/index.js

@@ -76,8 +76,8 @@ var verifyScopeInputSchema = z.object({
   venue: z.string().optional().describe('Optional trading venue or system being accessed (e.g. "euronext", "xetra").'),
   amount_usd: z.number().optional().describe("Optional transaction amount in USD for financial scope enforcement.")
 });
-async function verifyScopeHandler(client2, input) {
-  const cert = await client2.getActiveCertificate();
+async function verifyScopeHandler(client, input) {
+  const cert = await client.getActiveCertificate();
   const checkedAt = (/* @__PURE__ */ new Date()).toISOString();
   if (!cert) {
     return {
@@ -151,8 +151,8 @@ function isActionPermitted(action, permitted) {
 }
 
 // src/tools/check-risk.ts
-async function checkRiskHandler(client2) {
-  const profile = await client2.getRiskProfile();
+async function checkRiskHandler(client) {
+  const profile = await client.getRiskProfile();
   const checkedAt = (/* @__PURE__ */ new Date()).toISOString();
   const trend = profile.drift.drift_trend ?? "insufficient_data";
   const recommendation = buildRecommendation(profile.dominant_band, trend, profile.avg_score);
@@ -204,8 +204,8 @@ var auditLogAppendInputSchema = z2.object({
   ),
   session_id: z2.string().optional().describe("Optional session ID for grouping related events in the audit trail.")
 });
-async function auditLogAppendHandler(client2, input) {
-  const result = await client2.ingestEvent(
+async function auditLogAppendHandler(client, input) {
+  const result = await client.ingestEvent(
     input.event_type,
     input.metadata,
     input.session_id
@@ -224,29 +224,35 @@ async function auditLogAppendHandler(client2, input) {
 var apiKey = process.env["KAKUNIN_API_KEY"];
 var agentId = process.env["KAKUNIN_AGENT_ID"];
 var baseUrl = process.env["KAKUNIN_BASE_URL"];
-if (!apiKey) {
-  console.error("[kakunin-mcp] KAKUNIN_API_KEY is required");
-  process.exit(1);
-}
-if (!agentId) {
-  console.error("[kakunin-mcp] KAKUNIN_AGENT_ID is required");
-  process.exit(1);
+var _client;
+function getClient() {
+  if (!apiKey) {
+    throw new Error(
+      "KAKUNIN_API_KEY is required to call Kakunin tools. Set it in your MCP server environment."
+    );
+  }
+  if (!agentId) {
+    throw new Error(
+      "KAKUNIN_AGENT_ID is required to call Kakunin tools. Set it in your MCP server environment."
+    );
+  }
+  _client ??= new KakuninMcpClient({
+    apiKey,
+    agentId,
+    ...baseUrl !== void 0 ? { baseUrl } : {}
+  });
+  return _client;
 }
-var client = new KakuninMcpClient({
-  apiKey,
-  agentId,
-  ...baseUrl !== void 0 ? { baseUrl } : {}
-});
 var server = new McpServer({
   name: "kakunin",
-  version: "0.1.0"
+  version: "0.2.1"
 });
 server.tool(
   "verify_agent_scope",
   "Check whether this agent is authorised to perform a specific action or call a specific endpoint. Verifies the active X.509 certificate, permitted_actions scope, financial limits, and revocation status. Call this BEFORE executing any action that might exceed scope \u2014 not after.",
   verifyScopeInputSchema.shape,
   async (input) => {
-    const result = await verifyScopeHandler(client, input);
+    const result = await verifyScopeHandler(getClient(), input);
     return {
       content: [
         {
@@ -263,7 +269,7 @@ server.tool(
   // No input parameters
   {},
   async () => {
-    const result = await checkRiskHandler(client);
+    const result = await checkRiskHandler(getClient());
     return {
       content: [
         {
@@ -291,7 +297,7 @@ server.tool(
         isError: true
       };
     }
-    const result = await auditLogAppendHandler(client, parsed.data);
+    const result = await auditLogAppendHandler(getClient(), parsed.data);
     return {
       content: [
         {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@kakunin/mcp",
-  "version": "0.2.0",
-  "description": "Kakunin MCP server \u2014 lets AI agents query their own scope, risk score, and log behavioral events",
+  "version": "0.2.1",
+  "description": "Kakunin MCP server — lets AI agents query their own scope, risk score, and log behavioral events",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",