@mcpcloud/cli 0.23.0 → 0.24.0-next-20260917164347

package/README.md

@@ -353,7 +353,7 @@ _Generated from the live command tree by `bun run docs:readme` — do not edit b
 | `mcp api-keys create` | Create a new API key (the secret is shown once) |
 | `mcp api-keys describe <apiKey>` | Show one API key (accepts id or name; status, expiry, last used) — never the secret |
 | `mcp api-keys list` | List active API keys for the current user |
-| `mcp api-keys revoke <apiKey>` | Permanently revoke an API key (accepts id or name) |
+| `mcp api-keys revoke <apiKey>` | Permanently revoke an API key (accepts id or name). Needs --confirm "<key name>". |
 | `mcp api-keys rotate <apiKey>` | Mint a replacement key and grace-expire the old one (24h window; accepts id or name). The new secret is shown once. |
 
 ### `mcp audit` — Workspace audit log (admin/owner only)

package/dist/index.js

@@ -7410,6 +7410,7 @@ function registerServerGetCommand(servers) {
       url: s.deploymentUrl ?? "—",
       "tool surface": describeToolSurface(s),
       "upstream keys": s.upstreamApiKeyMode ?? "shared",
+      upstream: "mcp deployments get latest --server <server>",
       "end-user access": s.endUserAccess ?? "disabled",
       ...s.endUserAccess === "enabled" && s.connectPageUrl ? { "connect page": s.connectPageUrl } : {},
       git: gitLink ? `${gitLink.owner}/${gitLink.name}@${gitLink.branch} (mcp servers git status)` : "—",
@@ -29642,8 +29643,24 @@ function registerApiKeyCommands(program) {
       "old key valid until": data.rotatedFrom ? formatDate(data.rotatedFrom.gracePeriodEndsAt) : "—"
     });
   }));
-  apiKeys.command("revoke <apiKey>").description("Permanently revoke an API key (accepts id or name)").action(runAction(async (apiKeyRef) => {
+  apiKeys.command("revoke <apiKey>").description('Permanently revoke an API key (accepts id or name). Needs --confirm "<key name>".').option("--confirm <name>", "The key's exact name, to confirm. Required — revocation is immediate and cannot be undone.").addHelpText("after", [
+    "",
+    "Revocation takes effect at once and cannot be reversed: every caller",
+    "holding this secret starts failing, including CI. To replace a key",
+    "without a gap, use `mcp api-keys rotate` instead — it mints the new",
+    "secret and grace-expires this one over 24h.",
+    "",
+    "Example:",
+    '  $ mcp api-keys revoke ci-build --confirm "ci-build"'
+  ].join(`
+`)).action(runAction(async (apiKeyRef, opts) => {
     const apiKeyId = await resolveApiKeyId(apiKeyRef);
+    const current = await api.get("/api/v1/api-keys", { apiKeyId });
+    assertConfirmMatches({
+      entityKind: "API key",
+      entityName: current.apiKey.name,
+      confirm: opts.confirm
+    });
     const data = await api.delete("/api/v1/api-keys", { apiKeyId });
     if (isJsonMode()) {
       printJson(data);
@@ -33071,6 +33088,10 @@ function registerDeploymentCommands(program) {
       hostname: d.hostname ?? "—",
       exposure: formatDeploymentExposure(d),
       "access mode": d.accessMode,
+      environment: d.environment ?? "production",
+      upstream: d.upstream?.baseUrl ?? "(spec default)",
+      "key header": d.upstream?.apiKeyHeader ?? "—",
+      "key prefix": d.upstream?.apiKeyPrefix ?? "—",
       status: d.status,
       version: d.version,
       "deployed at": d.deployedAt ? formatDate(d.deployedAt) : "—",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mcpcloud/cli",
-  "version": "0.23.0",
+  "version": "0.24.0-next-20260917164347",
   "description": "The official CLI for MCPCloud — manage projects, servers, skills, and API keys from the terminal",
   "type": "module",
   "bin": {