@mairwunnx/minecraft-mcp 4.0.0 → 4.0.1

package/dist/tools/server.js

@@ -198,7 +198,7 @@ export function serverTools(ctx) {
         name: "manage_access",
         untrusted: true,
         title: "Whitelist, operators, bans, and kicks",
-        description: "Change who may play, in one call; give only the parts you need. `whitelist` turns it on or off, enforces it (kicks online players who aren't on it), and adds or removes players. `operators` makes players operators or takes it away. `ban` bans players by name or UUID and `banIps` addresses, kicking anyone online they hit; `pardon` and `pardonIps` lift bans. `kick` disconnects players with a reason. Needs players:moderate. Confirm bans and kicks with the user first.",
+        description: "Change who may play, in one call; give only the parts you need. `whitelist` turns it on or off, enforces it (kicks online players who aren't on it), and adds or removes players. `operators` makes players operators or takes it away; it needs server:console, since an operator may run every command. `ban` bans players by name or UUID and `banIps` addresses, kicking anyone online they hit; `pardon` and `pardonIps` lift bans. `kick` disconnects players with a reason. Needs players:moderate. Confirm bans and kicks with the user first.",
         scope: "players:moderate",
         effect: "destructive",
         input: {
@@ -223,6 +223,9 @@ export function serverTools(ctx) {
                 done.whitelist = await unwrap(api.PATCH("/server/whitelist", {
                     body: { ...args.whitelist, add: args.whitelist.add ?? [], remove: args.whitelist.remove ?? [] },
                 }), token);
+            // WorldAPI 4.1.1 asks server:console for operators: they run every command, /worldapi among them.
+            if (args.operators && !ctx.scopes.has("server:console"))
+                throw new Error("operators needs server:console: an operator may run every command; ask the user for a token that has it");
             if (args.operators)
                 done.operators = await unwrap(api.PATCH("/server/ops", { body: { add: args.operators.add ?? [], remove: args.operators.remove ?? [] } }), token);
             if (args.ban || args.pardon || args.banIps || args.pardonIps)

package/openapi/worldapi.json

@@ -4630,15 +4630,15 @@
       "patch": {
         "operationId": "patchPlayersPlayerPermissions",
         "summary": "Make a player an operator or take it away",
-        "description": "Permission: `players:moderate`.",
+        "description": "Needs `server:console`, not `players:moderate`: an operator may run every command, `/worldapi` among them.\n\nPermission: `server:console`.",
         "tags": [
           "Player data"
         ],
-        "x-scope": "players:moderate",
+        "x-scope": "server:console",
         "security": [
           {
             "bearer": [
-              "players:moderate"
+              "server:console"
             ]
           }
         ],
@@ -6539,15 +6539,15 @@
       "patch": {
         "operationId": "patchServerOps",
         "summary": "Make players operators or take it away",
-        "description": "Permission: `players:moderate`.",
+        "description": "Needs `server:console`, not `players:moderate`: an operator may run every command, `/worldapi` among them.\n\nPermission: `server:console`.",
         "tags": [
           "Access"
         ],
-        "x-scope": "players:moderate",
+        "x-scope": "server:console",
         "security": [
           {
             "bearer": [
-              "players:moderate"
+              "server:console"
             ]
           }
         ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mairwunnx/minecraft-mcp",
-  "version": "4.0.0",
+  "version": "4.0.1",
   "mcpName": "com.mairwunnx/minecraft-mcp",
   "description": "MCP server that lets AI agents read and manage a Minecraft server through WorldAPI",
   "keywords": [