@launchdarkly/mcp-server 0.7.0 → 0.7.1

package/dist/esm/mcp-server/cli/start/tls-blocklist.js

@@ -0,0 +1,192 @@
+import { createHash, X509Certificate } from "node:crypto";
+import tls from "node:tls";
+/*
+ * INC-289: rejects TLS chains that go through the compromised eMudhra
+ * intermediates (https://emudhra.we-have-a-problem.com/). Go 1.26.10, Node.js
+ * 22.23.4 / 24.22.1 / 26.12.1 and Bun (unreleased, oven-sh/bun#46300) block
+ * the same keys natively. This check covers runtimes that predate those fixes.
+ * It is installed only by the `mcp start` CLI, never for library consumers.
+ */
+/**
+ * SHA-256 of the DER SubjectPublicKeyInfo of each compromised intermediate.
+ * Identical to Node.js's kBlockedSPKIs (nodejs/node#66871) and Go's fix
+ * (CVE-2026-111943). Each key was issued twice, under emSign Root TLS/CS CA -
+ * G3 and under Sectigo's AAA Certificate Services, so hashing the key rather
+ * than the certificate covers both.
+ */
+export const BLOCKED_SPKI_SHA256 = new Set([
+    "43bffa19d6ef651451f6841e019931e96f6f2eaeff28ab4b6f1ce4576de2717b",
+    "49dd353dc2b919a3770645117d0e60c16115e7d1bc259eefe734b00ea434fe5f",
+    "5c0660a2b164910d8ff589c18e14552e9e0ec237dcefe2cb736d41a4811f81a0",
+    "63ecefee431d49523bc1136c4e72d0206a477086caf606cd5cf025686c109cf8",
+    "92c063d67e8f14db71d288e11266ffdaf69cbf115f7bab14f3bc2f68d25e0e30",
+    "e0254c7fcdc265e2f0f8a428dabb75ab4ae039b4872d62f5ee57f0877d5a8a41",
+    "ebed6475c2c2d80fcb199f3fe8dd6e6b3ce60b77eb15d4e42c3dec0c6f5b5105",
+    "ec4ffa1ad0ac88081314b7aaffef6a91f97cd57291bb5ba686c5415f5eb4f6b6",
+]);
+/**
+ * Common names of the compromised intermediates. Every one of them has
+ * pathlen:0, so any leaf signed with one of their keys must name the
+ * intermediate as its issuer. Bun's fetch only exposes the leaf to
+ * checkServerIdentity, so the issuer name is what blocks these chains there.
+ */
+const BLOCKED_ISSUER_CN = /^em (dv|ov|ev) (tls|cs) ca - g3[bc]$/;
+/**
+ * Node.js releases that block these keys natively, by major version. Lines
+ * newer than the highest entry are treated as patched; any other line is
+ * treated as unpatched.
+ */
+const FIXED_NODE_VERSIONS = {
+    22: [22, 23, 4],
+    24: [24, 22, 1],
+    26: [26, 12, 1],
+};
+/**
+ * First Bun release that blocks these keys natively. Set this once one ships
+ * (the fix is oven-sh/bun#46300). While it is undefined, every Bun version
+ * gets the warning.
+ */
+const FIXED_BUN_VERSION = undefined;
+export const BLOCKED_CERT_ERROR_CODE = "ERR_TLS_CERT_BLOCKED";
+// Captured before installTlsBlocklist() replaces tls.checkServerIdentity.
+const defaultCheckServerIdentity = tls.checkServerIdentity;
+function normalizeName(value) {
+    return value.normalize("NFKC").toLowerCase().replace(/\s+/g, " ").trim();
+}
+export function isBlockedIssuerName(cn) {
+    const names = Array.isArray(cn) ? cn : cn === undefined ? [] : [cn];
+    return names.some((name) => BLOCKED_ISSUER_CN.test(normalizeName(name)));
+}
+export function spkiSha256(raw) {
+    const spki = new X509Certificate(raw).publicKey.export({
+        type: "spki",
+        format: "der",
+    });
+    return createHash("sha256").update(spki).digest("hex");
+}
+/**
+ * Walks the peer chain (the full chain on Node.js, the leaf only on Bun) and
+ * returns a description of the first blocked certificate, if any.
+ */
+export function findBlockedCertificate(cert) {
+    const seen = new Set();
+    for (let current = cert; current && !seen.has(current); current = current.issuerCertificate) {
+        seen.add(current);
+        if (isBlockedIssuerName(current.issuer?.CN)) {
+            return `certificate issued by "${String(current.issuer?.CN)}"`;
+        }
+        if (current.raw && current.raw.length > 0) {
+            const hash = spkiSha256(current.raw);
+            if (BLOCKED_SPKI_SHA256.has(hash)) {
+                return `certificate with blocked public key sha256/${hash}`;
+            }
+        }
+    }
+    return undefined;
+}
+/**
+ * A tls checkServerIdentity replacement: rejects blocked chains, then runs
+ * the runtime's normal hostname verification.
+ */
+export function checkServerIdentity(hostname, cert) {
+    let blocked;
+    try {
+        blocked = findBlockedCertificate(cert);
+    }
+    catch (err) {
+        blocked = `certificate that could not be parsed (${String(err)})`;
+    }
+    if (blocked) {
+        return Object.assign(new Error(`Refusing TLS connection to ${hostname}: the chain contains a ${blocked}, ` +
+            "which belongs to a compromised eMudhra intermediate CA."), { code: BLOCKED_CERT_ERROR_CODE });
+    }
+    return defaultCheckServerIdentity(hostname, cert);
+}
+let installed = false;
+/**
+ * Installs the blocklist for this process. On Node.js, global fetch (undici)
+ * and node:https read tls.checkServerIdentity when they connect. Bun's fetch
+ * ignores it, so on Bun global fetch is wrapped to pass the check through
+ * Bun's `tls` fetch option.
+ */
+export function installTlsBlocklist() {
+    if (installed)
+        return;
+    installed = true;
+    if (isBun()) {
+        const originalFetch = globalThis.fetch;
+        const wrapped = (input, init) => {
+            const tlsOptions = init?.tls;
+            const callerCheck = tlsOptions?.checkServerIdentity;
+            const combined = callerCheck
+                ? (hostname, cert) => checkServerIdentity(hostname, cert) ?? callerCheck(hostname, cert)
+                : checkServerIdentity;
+            return originalFetch(input, {
+                ...init,
+                tls: { ...tlsOptions, checkServerIdentity: combined },
+            });
+        };
+        globalThis.fetch = Object.assign(wrapped, originalFetch);
+    }
+    else {
+        tls.checkServerIdentity =
+            checkServerIdentity;
+    }
+}
+function isBun() {
+    return typeof globalThis.Bun !== "undefined";
+}
+function parseVersion(version) {
+    const match = /^v?(\d+)\.(\d+)\.(\d+)/.exec(version);
+    if (!match)
+        return undefined;
+    return [Number(match[1]), Number(match[2]), Number(match[3])];
+}
+function compareVersions(a, b) {
+    return a[0] - b[0] || a[1] - b[1] || a[2] - b[2];
+}
+export function isNodeVersionPatched(version) {
+    const parsed = parseVersion(version);
+    if (!parsed)
+        return false;
+    const fixed = FIXED_NODE_VERSIONS[parsed[0]];
+    if (fixed)
+        return compareVersions(parsed, fixed) >= 0;
+    const newestLine = Math.max(...Object.keys(FIXED_NODE_VERSIONS).map(Number));
+    return parsed[0] > newestLine;
+}
+export function isBunVersionPatched(version) {
+    if (FIXED_BUN_VERSION === undefined)
+        return false;
+    const parsed = parseVersion(version);
+    const fixed = parseVersion(FIXED_BUN_VERSION);
+    return !!parsed && !!fixed && compareVersions(parsed, fixed) >= 0;
+}
+/**
+ * Returns a warning when the current runtime does not block the compromised
+ * eMudhra intermediates natively, or undefined when it does.
+ */
+export function unpatchedRuntimeWarning(versions = process.versions) {
+    let runtime;
+    let upgrade;
+    if (versions.bun !== undefined) {
+        if (isBunVersionPatched(versions.bun))
+            return undefined;
+        runtime = `Bun ${versions.bun}`;
+        upgrade =
+            "run the server with Node.js 22.23.4, 24.22.1, 26.12.1 or later, or use the Docker image";
+    }
+    else if (versions.node !== undefined) {
+        if (isNodeVersionPatched(versions.node))
+            return undefined;
+        runtime = `Node.js ${versions.node}`;
+        upgrade = "upgrade to Node.js 22.23.4, 24.22.1, 26.12.1 or later";
+    }
+    else {
+        return undefined;
+    }
+    return (`WARNING: ${runtime} does not block the compromised eMudhra intermediate CAs. ` +
+        "The LaunchDarkly MCP server rejects them for its own requests, but the runtime does not; " +
+        `${upgrade}. See https://github.com/launchdarkly/mcp-server#runtime-requirements\n`);
+}
+//# sourceMappingURL=tls-blocklist.js.map

package/dist/esm/mcp-server/cli/start/tls-blocklist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tls-blocklist.js","sourceRoot":"","sources":["../../../../../src/mcp-server/cli/start/tls-blocklist.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,GAAG,MAAM,UAAU,CAAC;AAE3B;;;;;;GAMG;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAC;IAC9D,kEAAkE;IAClE,kEAAkE;IAClE,kEAAkE;IAClE,kEAAkE;IAClE,kEAAkE;IAClE,kEAAkE;IAClE,kEAAkE;IAClE,kEAAkE;CACnE,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,sCAAsC,CAAC;AAEjE;;;;GAIG;AACH,MAAM,mBAAmB,GAErB;IACF,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACf,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACf,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;CAChB,CAAC;AAEF;;;;GAIG;AACH,MAAM,iBAAiB,GAAuB,SAAS,CAAC;AAExD,MAAM,CAAC,MAAM,uBAAuB,GAAG,sBAAsB,CAAC;AAe9D,0EAA0E;AAC1E,MAAM,0BAA0B,GAAwB,GAAG,CAAC,mBAAmB,CAAC;AAEhF,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,EAAiC;IAEjC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACpE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAe;IACxC,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC;QACrD,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAyB;IAEzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC5C,KACE,IAAI,OAAO,GAAoC,IAAI,EACnD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAC7B,OAAO,GAAG,OAAO,CAAC,iBAAiB,EACnC,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClB,IAAI,mBAAmB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;YAC5C,OAAO,0BAA0B,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC;QACjE,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClC,OAAO,8CAA8C,IAAI,EAAE,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,IAAyB;IAEzB,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,GAAG,yCAAyC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,MAAM,CAAC,MAAM,CAClB,IAAI,KAAK,CACP,8BAA8B,QAAQ,0BAA0B,OAAO,IAAI;YACzE,yDAAyD,CAC5D,EACD,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAClC,CAAC;IACJ,CAAC;IACD,OAAO,0BAA0B,CAC/B,QAAQ,EACR,IAAsC,CACvC,CAAC;AACJ,CAAC;AAED,IAAI,SAAS,GAAG,KAAK,CAAC;AAEtB;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB;IACjC,IAAI,SAAS;QAAE,OAAO;IACtB,SAAS,GAAG,IAAI,CAAC;IAEjB,IAAI,KAAK,EAAE,EAAE,CAAC;QACZ,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC;QACvC,MAAM,OAAO,GAAG,CACd,KAAkC,EAClC,IAAkC,EACR,EAAE;YAC5B,MAAM,UAAU,GACd,IAED,EAAE,GAAG,CAAC;YACP,MAAM,WAAW,GAAG,UAAU,EAAE,mBAAmB,CAAC;YACpD,MAAM,QAAQ,GAAwB,WAAW;gBAC/C,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CACjB,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC;gBACtE,CAAC,CAAE,mBAAsD,CAAC;YAC5D,OAAO,aAAa,CAAC,KAAK,EAAE;gBAC1B,GAAG,IAAI;gBACP,GAAG,EAAE,EAAE,GAAG,UAAU,EAAE,mBAAmB,EAAE,QAAQ,EAAE;aACvC,CAAC,CAAC;QACpB,CAAC,CAAC;QACF,UAAU,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC3D,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,mBAAmB;YACrB,mBAAqD,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,KAAK;IACZ,OAAO,OAAQ,UAAgC,CAAC,GAAG,KAAK,WAAW,CAAC;AACtE,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,eAAe,CACtB,CAAoC,EACpC,CAAoC;IAEpC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,MAAM,KAAK,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,IAAI,KAAK;QAAE,OAAO,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7E,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,IAAI,iBAAiB,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC;IAC9C,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,IAAI,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;AACpE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,WAGI,OAAO,CAAC,QAAQ;IAEpB,IAAI,OAAe,CAAC;IACpB,IAAI,OAAe,CAAC;IACpB,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QACxD,OAAO,GAAG,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC;QAChC,OAAO;YACL,yFAAyF,CAAC;IAC9F,CAAC;SAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACvC,IAAI,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAC1D,OAAO,GAAG,WAAW,QAAQ,CAAC,IAAI,EAAE,CAAC;QACrC,OAAO,GAAG,uDAAuD,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,CACL,YAAY,OAAO,4DAA4D;QAC/E,2FAA2F;QAC3F,GAAG,OAAO,yEAAyE,CACpF,CAAC;AACJ,CAAC"}

package/dist/esm/mcp-server/mcp-server.js

@@ -16,7 +16,7 @@ const routes = buildRouteMap({
 export const app = buildApplication(routes, {
     name: "mcp",
     versionInfo: {
-        currentVersion: "0.7.0",
+        currentVersion: "0.7.1",
     },
 });
 run(app, process.argv.slice(2), buildContext(process));

package/dist/esm/mcp-server/server.js

@@ -29,7 +29,7 @@ import { tool$featureFlagsPatch } from "./tools/featureFlagsPatch.js";
 export function createMCPServer(deps) {
     const server = new McpServer({
         name: "LaunchDarkly",
-        version: "0.7.0",
+        version: "0.7.1",
     });
     const client = new LaunchDarklyCore({
         apiKey: deps.apiKey,

package/jsr.json

@@ -2,7 +2,7 @@
 
 {
   "name": "@launchdarkly/mcp-server",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "exports": {
     ".": "./src/index.ts",    
     "./models/errors": "./src/models/errors/index.ts",    

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@launchdarkly/mcp-server",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "author": "LaunchDarkly",
   "keywords": [
     "feature-flags",
@@ -39,6 +39,7 @@
     "build:mcp": "bun src/mcp-server/build.mts",
     "build": "npm run build:mcp && tshy",
     "test:sse-security": "node --test --test-force-exit test/sse-security.test.mjs",
+    "test:tls-blocklist": "node --test --test-force-exit test/tls-blocklist.test.mjs",
     "prepublishOnly": "npm run build"
   },
   "peerDependencies": {},

package/src/lib/config.ts

@@ -69,8 +69,8 @@ export function serverURLFromOptions(options: SDKOptions): URL | null {
 export const SDK_METADATA = {
   language: "typescript",
   openapiDocVersion: "2.0",
-  sdkVersion: "0.7.0",
+  sdkVersion: "0.7.1",
   genVersion: "2.845.15",
   userAgent:
-    "speakeasy-sdk/typescript 0.7.0 2.845.15 2.0 @launchdarkly/mcp-server",
+    "speakeasy-sdk/typescript 0.7.1 2.845.15 2.0 @launchdarkly/mcp-server",
 } as const;

package/src/mcp-server/cli/start/impl.ts

@@ -19,6 +19,10 @@ import {
   isLoopbackHost,
   requireBearerToken,
 } from "./sse-security.js";
+import {
+  installTlsBlocklist,
+  unpatchedRuntimeWarning,
+} from "./tls-blocklist.js";
 
 interface StartCommandFlags {
   readonly transport: "stdio" | "sse";
@@ -35,6 +39,13 @@ interface StartCommandFlags {
 }
 
 export async function main(this: LocalContext, flags: StartCommandFlags) {
+  // INC-289: block the compromised eMudhra intermediates before any request.
+  installTlsBlocklist();
+  const runtimeWarning = unpatchedRuntimeWarning();
+  if (runtimeWarning) {
+    process.stderr.write(runtimeWarning);
+  }
+
   flags.env?.forEach(([key, value]) => {
     process.env[key] = value;
   });

package/src/mcp-server/cli/start/tls-blocklist.ts

@@ -0,0 +1,252 @@
+import { createHash, X509Certificate } from "node:crypto";
+import tls from "node:tls";
+
+/*
+ * INC-289: rejects TLS chains that go through the compromised eMudhra
+ * intermediates (https://emudhra.we-have-a-problem.com/). Go 1.26.10, Node.js
+ * 22.23.4 / 24.22.1 / 26.12.1 and Bun (unreleased, oven-sh/bun#46300) block
+ * the same keys natively. This check covers runtimes that predate those fixes.
+ * It is installed only by the `mcp start` CLI, never for library consumers.
+ */
+
+/**
+ * SHA-256 of the DER SubjectPublicKeyInfo of each compromised intermediate.
+ * Identical to Node.js's kBlockedSPKIs (nodejs/node#66871) and Go's fix
+ * (CVE-2026-111943). Each key was issued twice, under emSign Root TLS/CS CA -
+ * G3 and under Sectigo's AAA Certificate Services, so hashing the key rather
+ * than the certificate covers both.
+ */
+export const BLOCKED_SPKI_SHA256: ReadonlySet<string> = new Set([
+  "43bffa19d6ef651451f6841e019931e96f6f2eaeff28ab4b6f1ce4576de2717b",
+  "49dd353dc2b919a3770645117d0e60c16115e7d1bc259eefe734b00ea434fe5f",
+  "5c0660a2b164910d8ff589c18e14552e9e0ec237dcefe2cb736d41a4811f81a0",
+  "63ecefee431d49523bc1136c4e72d0206a477086caf606cd5cf025686c109cf8",
+  "92c063d67e8f14db71d288e11266ffdaf69cbf115f7bab14f3bc2f68d25e0e30",
+  "e0254c7fcdc265e2f0f8a428dabb75ab4ae039b4872d62f5ee57f0877d5a8a41",
+  "ebed6475c2c2d80fcb199f3fe8dd6e6b3ce60b77eb15d4e42c3dec0c6f5b5105",
+  "ec4ffa1ad0ac88081314b7aaffef6a91f97cd57291bb5ba686c5415f5eb4f6b6",
+]);
+
+/**
+ * Common names of the compromised intermediates. Every one of them has
+ * pathlen:0, so any leaf signed with one of their keys must name the
+ * intermediate as its issuer. Bun's fetch only exposes the leaf to
+ * checkServerIdentity, so the issuer name is what blocks these chains there.
+ */
+const BLOCKED_ISSUER_CN = /^em (dv|ov|ev) (tls|cs) ca - g3[bc]$/;
+
+/**
+ * Node.js releases that block these keys natively, by major version. Lines
+ * newer than the highest entry are treated as patched; any other line is
+ * treated as unpatched.
+ */
+const FIXED_NODE_VERSIONS: Readonly<
+  Record<number, readonly [number, number, number]>
+> = {
+  22: [22, 23, 4],
+  24: [24, 22, 1],
+  26: [26, 12, 1],
+};
+
+/**
+ * First Bun release that blocks these keys natively. Set this once one ships
+ * (the fix is oven-sh/bun#46300). While it is undefined, every Bun version
+ * gets the warning.
+ */
+const FIXED_BUN_VERSION: string | undefined = undefined;
+
+export const BLOCKED_CERT_ERROR_CODE = "ERR_TLS_CERT_BLOCKED";
+
+/** The subset of tls.PeerCertificate this check reads. */
+export interface PeerCertificateLike {
+  raw?: Uint8Array | undefined;
+  fingerprint256?: string | undefined;
+  issuer?: { CN?: string | string[] | undefined } | undefined;
+  issuerCertificate?: PeerCertificateLike | undefined;
+}
+
+type CheckServerIdentity = (
+  hostname: string,
+  cert: tls.PeerCertificate,
+) => Error | undefined;
+
+// Captured before installTlsBlocklist() replaces tls.checkServerIdentity.
+const defaultCheckServerIdentity: CheckServerIdentity = tls.checkServerIdentity;
+
+function normalizeName(value: string): string {
+  return value.normalize("NFKC").toLowerCase().replace(/\s+/g, " ").trim();
+}
+
+export function isBlockedIssuerName(
+  cn: string | string[] | undefined,
+): boolean {
+  const names = Array.isArray(cn) ? cn : cn === undefined ? [] : [cn];
+  return names.some((name) => BLOCKED_ISSUER_CN.test(normalizeName(name)));
+}
+
+export function spkiSha256(raw: Uint8Array): string {
+  const spki = new X509Certificate(raw).publicKey.export({
+    type: "spki",
+    format: "der",
+  });
+  return createHash("sha256").update(spki).digest("hex");
+}
+
+/**
+ * Walks the peer chain (the full chain on Node.js, the leaf only on Bun) and
+ * returns a description of the first blocked certificate, if any.
+ */
+export function findBlockedCertificate(
+  cert: PeerCertificateLike,
+): string | undefined {
+  const seen = new Set<PeerCertificateLike>();
+  for (
+    let current: PeerCertificateLike | undefined = cert;
+    current && !seen.has(current);
+    current = current.issuerCertificate
+  ) {
+    seen.add(current);
+    if (isBlockedIssuerName(current.issuer?.CN)) {
+      return `certificate issued by "${String(current.issuer?.CN)}"`;
+    }
+    if (current.raw && current.raw.length > 0) {
+      const hash = spkiSha256(current.raw);
+      if (BLOCKED_SPKI_SHA256.has(hash)) {
+        return `certificate with blocked public key sha256/${hash}`;
+      }
+    }
+  }
+  return undefined;
+}
+
+/**
+ * A tls checkServerIdentity replacement: rejects blocked chains, then runs
+ * the runtime's normal hostname verification.
+ */
+export function checkServerIdentity(
+  hostname: string,
+  cert: PeerCertificateLike,
+): Error | undefined {
+  let blocked: string | undefined;
+  try {
+    blocked = findBlockedCertificate(cert);
+  } catch (err) {
+    blocked = `certificate that could not be parsed (${String(err)})`;
+  }
+  if (blocked) {
+    return Object.assign(
+      new Error(
+        `Refusing TLS connection to ${hostname}: the chain contains a ${blocked}, ` +
+          "which belongs to a compromised eMudhra intermediate CA.",
+      ),
+      { code: BLOCKED_CERT_ERROR_CODE },
+    );
+  }
+  return defaultCheckServerIdentity(
+    hostname,
+    cert as unknown as tls.PeerCertificate,
+  );
+}
+
+let installed = false;
+
+/**
+ * Installs the blocklist for this process. On Node.js, global fetch (undici)
+ * and node:https read tls.checkServerIdentity when they connect. Bun's fetch
+ * ignores it, so on Bun global fetch is wrapped to pass the check through
+ * Bun's `tls` fetch option.
+ */
+export function installTlsBlocklist(): void {
+  if (installed) return;
+  installed = true;
+
+  if (isBun()) {
+    const originalFetch = globalThis.fetch;
+    const wrapped = (
+      input: Parameters<typeof fetch>[0],
+      init?: Parameters<typeof fetch>[1],
+    ): ReturnType<typeof fetch> => {
+      const tlsOptions = (
+        init as
+          { tls?: { checkServerIdentity?: CheckServerIdentity } } | undefined
+      )?.tls;
+      const callerCheck = tlsOptions?.checkServerIdentity;
+      const combined: CheckServerIdentity = callerCheck
+        ? (hostname, cert) =>
+            checkServerIdentity(hostname, cert) ?? callerCheck(hostname, cert)
+        : (checkServerIdentity as unknown as CheckServerIdentity);
+      return originalFetch(input, {
+        ...init,
+        tls: { ...tlsOptions, checkServerIdentity: combined },
+      } as RequestInit);
+    };
+    globalThis.fetch = Object.assign(wrapped, originalFetch);
+  } else {
+    tls.checkServerIdentity =
+      checkServerIdentity as unknown as CheckServerIdentity;
+  }
+}
+
+function isBun(): boolean {
+  return typeof (globalThis as { Bun?: unknown }).Bun !== "undefined";
+}
+
+function parseVersion(version: string): [number, number, number] | undefined {
+  const match = /^v?(\d+)\.(\d+)\.(\d+)/.exec(version);
+  if (!match) return undefined;
+  return [Number(match[1]), Number(match[2]), Number(match[3])];
+}
+
+function compareVersions(
+  a: readonly [number, number, number],
+  b: readonly [number, number, number],
+): number {
+  return a[0] - b[0] || a[1] - b[1] || a[2] - b[2];
+}
+
+export function isNodeVersionPatched(version: string): boolean {
+  const parsed = parseVersion(version);
+  if (!parsed) return false;
+  const fixed = FIXED_NODE_VERSIONS[parsed[0]];
+  if (fixed) return compareVersions(parsed, fixed) >= 0;
+  const newestLine = Math.max(...Object.keys(FIXED_NODE_VERSIONS).map(Number));
+  return parsed[0] > newestLine;
+}
+
+export function isBunVersionPatched(version: string): boolean {
+  if (FIXED_BUN_VERSION === undefined) return false;
+  const parsed = parseVersion(version);
+  const fixed = parseVersion(FIXED_BUN_VERSION);
+  return !!parsed && !!fixed && compareVersions(parsed, fixed) >= 0;
+}
+
+/**
+ * Returns a warning when the current runtime does not block the compromised
+ * eMudhra intermediates natively, or undefined when it does.
+ */
+export function unpatchedRuntimeWarning(
+  versions: {
+    node?: string | undefined;
+    bun?: string | undefined;
+  } = process.versions,
+): string | undefined {
+  let runtime: string;
+  let upgrade: string;
+  if (versions.bun !== undefined) {
+    if (isBunVersionPatched(versions.bun)) return undefined;
+    runtime = `Bun ${versions.bun}`;
+    upgrade =
+      "run the server with Node.js 22.23.4, 24.22.1, 26.12.1 or later, or use the Docker image";
+  } else if (versions.node !== undefined) {
+    if (isNodeVersionPatched(versions.node)) return undefined;
+    runtime = `Node.js ${versions.node}`;
+    upgrade = "upgrade to Node.js 22.23.4, 24.22.1, 26.12.1 or later";
+  } else {
+    return undefined;
+  }
+  return (
+    `WARNING: ${runtime} does not block the compromised eMudhra intermediate CAs. ` +
+    "The LaunchDarkly MCP server rejects them for its own requests, but the runtime does not; " +
+    `${upgrade}. See https://github.com/launchdarkly/mcp-server#runtime-requirements\n`
+  );
+}

package/src/mcp-server/mcp-server.ts

@@ -19,7 +19,7 @@ const routes = buildRouteMap({
 export const app = buildApplication(routes, {
   name: "mcp",
   versionInfo: {
-    currentVersion: "0.7.0",
+    currentVersion: "0.7.1",
   },
 });
 

package/src/mcp-server/server.ts

@@ -44,7 +44,7 @@ export function createMCPServer(deps: {
 }) {
   const server = new McpServer({
     name: "LaunchDarkly",
-    version: "0.7.0",
+    version: "0.7.1",
   });
 
   const client = new LaunchDarklyCore({