@mcpcloud/cli 0.27.0 → 0.28.0-next-20261003040400

package/README.md

@@ -571,7 +571,7 @@ _Generated from the live command tree by `bun run docs:readme` — do not edit b
 | `mcp servers test-suites run <server>` | Run the server’s test scenarios and report the suite result |
 | `mcp servers traces <server>` | Show recent tool-call traces from the edge — what a caller sent and what came back. Pass --request to open one call in full. |
 | `mcp servers transfer <server>` | Move a server into another organization you administer, keeping its id, slug, deployment, custom domain, end-user keys and git link. Shows the plan; add --yes to execute. |
-| `mcp servers update <server>` | Update a server (name, description, tool surface, upstream key mode, runtime token TTL, spec source URL) |
+| `mcp servers update <server>` | Update a server (name, description, tool surface, upstream key mode, runtime token TTL, client identity forwarding, spec source URL) |
 | `mcp servers variables` | Inspect and set the sandbox variables that scenario arguments reference |
 | `mcp servers variables list <server>` | List a server’s sandbox variables and which ones still need a value |
 | `mcp servers variables set <server>` | Set or clear sandbox variables (repeat --set; an empty value clears) |

package/dist/index.js

@@ -7970,6 +7970,7 @@ function registerServerGetCommand(servers) {
       url: s.deploymentUrl ?? "—",
       "tool surface": describeToolSurface(s),
       "upstream keys": s.upstreamApiKeyMode ?? "shared",
+      "client identity": s.forwardClientIdentity ? "forwarded" : "off",
       upstream: "mcp deployments get latest --server <server>",
       "end-user access": s.endUserAccess ?? "disabled",
       ...s.endUserAccess === "enabled" && s.connectPageUrl ? { "connect page": s.connectPageUrl } : {},
@@ -9124,7 +9125,7 @@ function driftLine(change) {
 
 // src/commands/servers-update.ts
 function registerServerUpdateCommand(servers) {
-  servers.command("update <server>").description("Update a server (name, description, tool surface, upstream key mode, runtime token TTL, spec source URL)").option("--org <organizationId>", "Organization ID").option("--name <name>", "New display name").option("--description <text>", "New description").option("--discovery-mode <all|wrapper>", 'Tool surface: "all" registers every operation; "wrapper" registers searchTools/getToolDefinition/useTool INSTEAD (operations are called through useTool).').option("--code-mode <off|opt-in|default>", "Code Mode: expose codemode_execute so an agent can script several calls in one sandboxed run. Served by the edge, so it takes effect on the next deploy.").option("--upstream-api-key-mode <shared|perMember>", "Whose upstream credential the server uses: one shared key, or each member their own (Pro and above). perMember needs a protected access mode (privateOrg or unlisted) — refused while the active deployment is public.").option("--runtime-token-ttl <seconds|default>", 'Runtime token lifetime in seconds (60-86400; the default AND cap for minted tokens). Pass "default" to restore the 300s platform default.').option("--source-url <url>", "Read this server’s spec from a different URL from now on. The URL is fetched and parsed as the server’s source type first, and the report shows what a regenerate from it would change. Tools are not touched until you regenerate.").option("--dry-run", "With --source-url: fetch, parse and report without storing anything").addHelpText("after", [
+  servers.command("update <server>").description("Update a server (name, description, tool surface, upstream key mode, runtime token TTL, client identity forwarding, spec source URL)").option("--org <organizationId>", "Organization ID").option("--name <name>", "New display name").option("--description <text>", "New description").option("--discovery-mode <all|wrapper>", 'Tool surface: "all" registers every operation; "wrapper" registers searchTools/getToolDefinition/useTool INSTEAD (operations are called through useTool).').option("--code-mode <off|opt-in|default>", "Code Mode: expose codemode_execute so an agent can script several calls in one sandboxed run. Served by the edge, so it takes effect on the next deploy.").option("--upstream-api-key-mode <shared|perMember>", "Whose upstream credential the server uses: one shared key, or each member their own (Pro and above). perMember needs a protected access mode (privateOrg or unlisted) — refused while the active deployment is public.").option("--runtime-token-ttl <seconds|default>", 'Runtime token lifetime in seconds (60-86400; the default AND cap for minted tokens). Pass "default" to restore the 300s platform default.').option("--forward-client-identity <on|off>", 'Tell your upstream API which agent is calling: "on" adds X-MCP-Client-Name (e.g. "Claude Code") and the MCP client info headers to every upstream request, so your app can show the agent by name. The values are the client’s own claims — for display, never for authentication. Takes effect on the next deploy.').option("--source-url <url>", "Read this server’s spec from a different URL from now on. The URL is fetched and parsed as the server’s source type first, and the report shows what a regenerate from it would change. Tools are not touched until you regenerate.").option("--dry-run", "With --source-url: fetch, parse and report without storing anything").addHelpText("after", [
     "",
     "Notes:",
     "  The OAuth provider is `mcp servers oauth set`; how customers sign in is",
@@ -9159,7 +9160,7 @@ async function runUpdate(serverRef, opts) {
     throw new Error("--dry-run only previews --source-url. Run the other changes without --dry-run.");
   }
   if (!hasSettings && opts.sourceUrl === undefined) {
-    throw new Error("Provide at least one of --name, --description, --discovery-mode, --code-mode, --upstream-api-key-mode, --runtime-token-ttl, or --source-url.");
+    throw new Error("Provide at least one of --name, --description, --discovery-mode, --code-mode, --upstream-api-key-mode, --runtime-token-ttl, --forward-client-identity, or --source-url.");
   }
   const orgId = await resolveOrgId(opts.org);
   const serverId = await resolveServerId(serverRef, orgId);
@@ -9238,6 +9239,12 @@ function buildSettingsPatch(opts) {
       body["runtimeTokenTtlSeconds"] = ttl;
     }
   }
+  if (opts.forwardClientIdentity !== undefined) {
+    body["forwardClientIdentity"] = validateChoice("forward-client-identity", opts.forwardClientIdentity, [
+      "on",
+      "off"
+    ]) === "on";
+  }
   return body;
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mcpcloud/cli",
-  "version": "0.27.0",
+  "version": "0.28.0-next-20261003040400",
   "description": "The official CLI for MCPCloud — manage projects, servers, skills, and API keys from the terminal",
   "type": "module",
   "bin": {