@kya-os/mcp-i-core 1.3.27 → 1.4.0

package/dist/runtime/base.js

@@ -1000,6 +1000,119 @@ class MCPIRuntimeBase {
                     timestamp: this.clock.now(),
                 };
             }
+            // SEP-1649 MCP Server Card for client discovery
+            // Support both paths during spec transition:
+            // - /.well-known/mcp.json (current Cursor/Claude Desktop usage)
+            // - /.well-known/mcp/server-card.json (SEP-1649 proposed spec)
+            if (path === "/.well-known/mcp.json" || path === "/.well-known/mcp/server-card.json") {
+                const serverName = config?.serviceName || "mcp-i-server";
+                // SEP-1649 compliant MCP Server Card
+                const mcpServerCard = {
+                    $schema: "https://static.modelcontextprotocol.io/schemas/mcp-server-card/v1.json",
+                    version: "1.0",
+                    protocolVersion: config?.protocolVersion || "2025-06-18",
+                    serverInfo: {
+                        name: serverName,
+                        title: config?.serviceTitle || config?.serviceName || "MCP-I Server",
+                        version: config?.serverVersion || "1.0.0",
+                    },
+                    description: config?.description || "MCP-I enabled server with cryptographic identity",
+                    ...(config?.iconUrl && { iconUrl: config.iconUrl }),
+                    ...(config?.documentationUrl && { documentationUrl: config.documentationUrl }),
+                    transport: {
+                        type: "streamable-http",
+                        endpoint: "/mcp",
+                    },
+                    capabilities: {
+                        tools: { listChanged: true },
+                    },
+                    ...(config?.requiresAuth && {
+                        authentication: {
+                            required: true,
+                            schemes: config.authSchemes || ["oauth2"],
+                        },
+                    }),
+                    ...(config?.instructions && { instructions: config.instructions }),
+                    // Tools are dynamic - discovered via protocol
+                    tools: "dynamic",
+                    _meta: {
+                        ...config?.metadata,
+                        "mcp-i": {
+                            agentDid: identity.did,
+                            publicKey: identity.publicKey,
+                            generatedAt: this.clock.now(),
+                        },
+                    },
+                };
+                const headers = {
+                    "Content-Type": "application/json",
+                    "Cache-Control": this.config.environment === "production"
+                        ? "public, max-age=3600" // SEP-1649 recommends 1 hour
+                        : "no-store",
+                    // SEP-1649 CORS requirements for browser-based client discovery
+                    "Access-Control-Allow-Origin": "*",
+                    "Access-Control-Allow-Methods": "GET",
+                    "Access-Control-Allow-Headers": "Content-Type",
+                };
+                return {
+                    status: 200,
+                    headers,
+                    body: JSON.stringify(mcpServerCard, null, 2),
+                };
+            }
+            // Client configuration helper - ready-to-use config for Cursor/Claude Desktop
+            if (path === "/.well-known/mcp-client-config.json") {
+                const serviceEndpoint = config?.serviceEndpoint || "https://example.com";
+                const serverName = config?.serviceName || "mcp-i-server";
+                const mcpUrl = `${serviceEndpoint}/mcp`;
+                // Generate Cursor deep link
+                // Note: Base64 can contain +, /, = which have special meaning in URLs
+                // Must URL-encode the base64 string for safe transmission
+                const cursorConfig = { [serverName]: { url: mcpUrl, transport: "sse" } };
+                const encodedConfig = Buffer.from(JSON.stringify(cursorConfig)).toString("base64");
+                const cursorDeepLink = `cursor://anysphere.cursor-deeplink/mcp/install?name=${encodeURIComponent(serverName)}&config=${encodeURIComponent(encodedConfig)}`;
+                const clientConfig = {
+                    // For claude_desktop_config.json
+                    claudeDesktop: {
+                        mcpServers: {
+                            [serverName]: {
+                                url: mcpUrl,
+                                transport: "sse",
+                            },
+                        },
+                    },
+                    // For .cursor/mcp.json
+                    cursor: {
+                        mcpServers: {
+                            [serverName]: {
+                                url: mcpUrl,
+                                transport: "sse",
+                            },
+                        },
+                    },
+                    // One-click install for Cursor
+                    cursorDeepLink,
+                    // Additional info
+                    _meta: {
+                        serverName,
+                        serverUrl: serviceEndpoint,
+                        mcpEndpoint: mcpUrl,
+                        agentDid: identity.did,
+                        generatedAt: this.clock.now(),
+                        instructions: "Copy the appropriate config section to your client configuration file.",
+                    },
+                };
+                return {
+                    status: 200,
+                    headers: {
+                        "Content-Type": "application/json",
+                        "Cache-Control": this.config.environment === "production"
+                            ? "public, max-age=300"
+                            : "no-store",
+                    },
+                    body: JSON.stringify(clientConfig, null, 2),
+                };
+            }
             return null;
         };
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/mcp-i-core",
-  "version": "1.3.27",
+  "version": "1.4.0",
   "description": "Core runtime and types for MCP-I framework",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -28,7 +28,7 @@
     "prepublishOnly": "npm run build && node ../create-mcpi-app/scripts/validate-no-workspace.js"
   },
   "dependencies": {
-    "@kya-os/contracts": "^1.6.18",
+    "@kya-os/contracts": "^1.7.0",
     "jose": "^5.6.3",
     "json-canonicalize": "^2.0.0",
     "zod": "^3.25.76"