@kya-os/mcp-i 1.6.10 → 1.6.12

package/dist/runtime/utils/tools.js

@@ -9,6 +9,7 @@ const auth_handshake_1 = require("../auth-handshake");
 const session_1 = require("../session");
 const request_context_1 = require("../request-context");
 const proof_batch_queue_1 = require("../proof-batch-queue");
+const mcp_i_core_1 = require("@kya-os/mcp-i-core");
 const rawRuntimeConfigPath = typeof RUNTIME_CONFIG_PATH !== "undefined" ? RUNTIME_CONFIG_PATH : undefined;
 // Single-parse to match single-stringify from webpack DefinePlugin
 const runtimeConfigPath = rawRuntimeConfigPath
@@ -510,27 +511,45 @@ async function addToolsToServer(server, toolModules, identityConfig) {
                 }
                 // Check if authorization method matches current tool requirements
                 // This prevents stale delegations from working after tool auth method changes
+                // NOTE: Authorization validation only applies when credential is present (AgentShield API verifier).
+                // KV/Memory verifiers don't return credential data, so we skip auth method validation for them.
                 if (verifyResult.authorized &&
-                    verifyResult.credential?.authorization &&
-                    toolProtection.authorization) {
-                    const delegationAuth = verifyResult.credential.authorization;
+                    toolProtection.authorization &&
+                    verifyResult.credential) {
                     const toolAuth = toolProtection.authorization;
-                    // Compare authorization types
-                    let authMatches = delegationAuth.type === toolAuth.type;
-                    // For OAuth, also compare provider
-                    if (authMatches &&
-                        delegationAuth.type === "oauth" &&
-                        toolAuth.type === "oauth") {
-                        authMatches = delegationAuth.provider === toolAuth.provider;
-                    }
-                    // For credential, also compare credentialType
-                    if (authMatches &&
-                        delegationAuth.type === "credential" &&
-                        toolAuth.type === "credential") {
-                        authMatches =
-                            delegationAuth.credentialType === toolAuth.credentialType;
+                    const delegationAuth = verifyResult.credential.authorization;
+                    // If tool requires authorization but credential doesn't have auth data, reject
+                    // This prevents bypassing auth checks with incomplete credential data
+                    if (!delegationAuth) {
+                        if (identityConfig?.debug) {
+                            console.error(`[MCPI] Tool "${name}" blocked - credential missing authorization data`);
+                        }
+                        // Build authorization URL for re-authorization
+                        const authUrl = new URL(authConfig.bouncer.authorizationUrl);
+                        authUrl.searchParams.set("agent_did", agentDid);
+                        authUrl.searchParams.set("scopes", (toolProtection.requiredScopes || []).join(","));
+                        authUrl.searchParams.set("tool", name);
+                        return {
+                            content: [
+                                {
+                                    type: "text",
+                                    text: JSON.stringify({
+                                        error: "authorization_data_missing",
+                                        message: `Tool "${name}" requires authorization method ${toolAuth.type}` +
+                                            `${toolAuth.provider ? `:${toolAuth.provider}` : ""}` +
+                                            `${toolAuth.credentialType ? `:${toolAuth.credentialType}` : ""} ` +
+                                            `but delegation credential does not contain authorization data. Please re-authorize.`,
+                                        authorizationUrl: authUrl.toString(),
+                                        scopes: toolProtection.requiredScopes || [],
+                                        requiredAuth: toolAuth,
+                                    }),
+                                },
+                            ],
+                            isError: true,
+                        };
                     }
-                    if (!authMatches) {
+                    // Compare authorization types using the helper function
+                    if (!(0, mcp_i_core_1.authorizationMatches)(delegationAuth, toolAuth)) {
                         if (identityConfig?.debug) {
                             console.error(`[MCPI] Tool "${name}" blocked - authorization method mismatch`);
                         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/mcp-i",
-  "version": "1.6.10",
+  "version": "1.6.12",
   "description": "The TypeScript MCP framework with identity features built-in",
   "type": "commonjs",
   "main": "dist/index.js",
@@ -63,8 +63,8 @@
     "model-context-protocol"
   ],
   "dependencies": {
-    "@kya-os/contracts": "^1.6.14",
-    "@kya-os/mcp-i-core": "^1.3.21",
+    "@kya-os/contracts": "^1.6.15",
+    "@kya-os/mcp-i-core": "^1.3.22",
     "@modelcontextprotocol/sdk": "^1.11.4",
     "@swc/core": "^1.11.24",
     "@types/express": "^5.0.1",