@mastra/mcp-docs-server 0.13.17-alpha.3 → 0.13.17-alpha.5

package/dist/stdio.js

@@ -94,8 +94,21 @@ async function fetchBlogPosts() {
   }).filter(Boolean);
   return "Mastra.ai Blog Posts:\n\n" + blogLinks.join("\n");
 }
+function validateBlogUrl(url) {
+  try {
+    const inputUrl = new URL(url);
+    const baseUrl = new URL(BLOG_BASE_URL);
+    return inputUrl.hostname === baseUrl.hostname;
+  } catch {
+    return false;
+  }
+}
 async function fetchBlogPost(url) {
   void logger.debug(`Fetching blog post: ${url}`);
+  if (!validateBlogUrl(url)) {
+    void logger.error(`Rejected request to unauthorized domain: ${url}`);
+    return `URL must be from the same domain as ${BLOG_BASE_URL}`;
+  }
   const response = await fetch(url);
   if (!response.ok) {
     if (response.status === 429) {
@@ -798,7 +811,11 @@ async function listDirContents(dirPath) {
   }
 }
 async function readMdxContent(docPath, queryKeywords) {
-  const fullPath = path3__default.join(docsBaseDir, docPath);
+  const fullPath = path3__default.resolve(path3__default.join(docsBaseDir, docPath));
+  if (!fullPath.startsWith(path3__default.resolve(docsBaseDir))) {
+    void logger.error(`Path traversal attempt detected`);
+    return { found: false };
+  }
   void logger.debug(`Reading MDX content from: ${fullPath}`);
   try {
     const stats = await fs3.stat(fullPath);

package/dist/tools/blog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"blog.d.ts","sourceRoot":"","sources":["../../src/tools/blog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAyExB,eAAO,MAAM,eAAe;;;;;;EAM1B,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,QAAQ;;;;;;;;;;oBAKG,SAAS;CAehC,CAAC"}
+{"version":3,"file":"blog.d.ts","sourceRoot":"","sources":["../../src/tools/blog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA8FxB,eAAO,MAAM,eAAe;;;;;;EAM1B,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,QAAQ;;;;;;;;;;oBAKG,SAAS;CAehC,CAAC"}

package/dist/tools/docs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"docs.d.ts","sourceRoot":"","sources":["../../src/tools/docs.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA4JxB,eAAO,MAAM,eAAe;;;;;;;;;EAW1B,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,QAAQ;;;;;;;;;;;;;oBAkBG,SAAS;CAiDhC,CAAC"}
+{"version":3,"file":"docs.d.ts","sourceRoot":"","sources":["../../src/tools/docs.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgKxB,eAAO,MAAM,eAAe;;;;;;;;;EAW1B,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,QAAQ;;;;;;;;;;;;;oBAkBG,SAAS;CAiDhC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mastra/mcp-docs-server",
-  "version": "0.13.17-alpha.3",
+  "version": "0.13.17-alpha.5",
   "description": "MCP server for accessing Mastra.ai documentation, changelogs, and news.",
   "type": "module",
   "main": "dist/index.js",
@@ -9,7 +9,8 @@
   "files": [
     "dist",
     ".docs",
-    "README.md"
+    "README.md",
+    "CHANGELOG.md"
   ],
   "exports": {
     ".": {
@@ -30,10 +31,10 @@
     "jsdom": "^26.1.0",
     "turndown": "^7.2.0",
     "uuid": "^11.1.0",
-    "zod": "^3.25.67",
-    "zod-to-json-schema": "^3.24.5",
-    "@mastra/core": "0.15.3-alpha.3",
-    "@mastra/mcp": "^0.11.3-alpha.0"
+    "zod": "^3.25.76",
+    "zod-to-json-schema": "^3.24.6",
+    "@mastra/core": "0.15.3-alpha.5",
+    "@mastra/mcp": "^0.11.3-alpha.2"
   },
   "devDependencies": {
     "@hono/node-server": "^1.17.1",
@@ -48,9 +49,18 @@
     "tsx": "^4.19.4",
     "typescript": "^5.8.3",
     "vitest": "^3.2.4",
-    "@mastra/core": "0.15.3-alpha.3",
+    "@mastra/core": "0.15.3-alpha.5",
     "@internal/lint": "0.0.34"
   },
+  "homepage": "https://mastra.ai",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/mastra-ai/mastra.git",
+    "directory": "packages/mcp-docs-server"
+  },
+  "bugs": {
+    "url": "https://github.com/mastra-ai/mastra/issues"
+  },
   "scripts": {
     "prepare-docs": "cross-env PREPARE=true node dist/prepare-docs/prepare.js",
     "build:cli": "tsup src/stdio.ts src/prepare-docs/prepare.ts --format esm --no-dts --treeshake=smallest --splitting && tsc -p tsconfig.build.json",