@nextoolsolutions/mcp-glpi-core 1.3.1 → 1.3.2

package/CHANGELOG.md

@@ -4,6 +4,13 @@ Format: [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). Versions follo
 
 ## [Unreleased]
 
+## [1.3.2] - 2026-10-05
+
+### Fixed
+- **`openWorldHint` is now `true` on every tool.** The tools reach the GLPI instance the user connected, an external
+  system controlled by that organization; the MCP spec calls that open-world, and the OpenAI plugin scan flagged
+  `false` on every tool. Other annotations are unchanged.
+
 ## [1.3.1] - 2026-10-04
 
 ### Fixed

package/dist/policy.d.ts

@@ -44,8 +44,8 @@ export interface ToolAnnotationHints {
  *                   idempotency.ts);
  *   - destructive → destructiveHint, idempotent (deleting twice leaves the
  *                   same state; the second call just fails).
- * openWorldHint is false: every tool talks to the one GLPI instance configured,
- * not to an open set of external systems.
+ * openWorldHint is true: every tool reaches the GLPI instance the user connected, an external system
+ * controlled by that organization, not by this server (MCP spec; directory scans flag false here).
  */
 export declare function annotationsFor(kind: OperationKind, toolName?: string): ToolAnnotationHints;
 /** "glpi_v2_list_kb_articles" -> "List kb articles (API v2)": fallback title when a tool has none. */

package/dist/policy.js

@@ -74,8 +74,8 @@ const ADDITIVE_WRITE_PREFIXES = ["create_", "add_"];
  *                   idempotency.ts);
  *   - destructive → destructiveHint, idempotent (deleting twice leaves the
  *                   same state; the second call just fails).
- * openWorldHint is false: every tool talks to the one GLPI instance configured,
- * not to an open set of external systems.
+ * openWorldHint is true: every tool reaches the GLPI instance the user connected, an external system
+ * controlled by that organization, not by this server (MCP spec; directory scans flag false here).
  */
 export function annotationsFor(kind, toolName) {
     const verb = toolName ? verbOf(toolName) : "";
@@ -85,7 +85,7 @@ export function annotationsFor(kind, toolName) {
         idempotentHint: kind === "read" ||
             kind === "destructive" ||
             IDEMPOTENT_WRITE_PREFIXES.some((p) => verb.startsWith(p)),
-        openWorldHint: false,
+        openWorldHint: true,
     };
 }
 /** "glpi_v2_list_kb_articles" -> "List kb articles (API v2)": fallback title when a tool has none. */

package/dist/server-policy.d.ts

@@ -7,7 +7,7 @@
  * registered afterwards — present or future — gets:
  *
  *   1. MCP annotations derived from its name (title, readOnlyHint,
- *      destructiveHint, idempotentHint, openWorldHint: false);
+ *      destructiveHint, idempotentHint, openWorldHint: true);
  *   2. a mandatory `reason` field on destructive tools;
  *   3. a policy check that runs before the handler touches GLPI.
  *

package/dist/server-policy.js

@@ -7,7 +7,7 @@
  * registered afterwards — present or future — gets:
  *
  *   1. MCP annotations derived from its name (title, readOnlyHint,
- *      destructiveHint, idempotentHint, openWorldHint: false);
+ *      destructiveHint, idempotentHint, openWorldHint: true);
  *   2. a mandatory `reason` field on destructive tools;
  *   3. a policy check that runs before the handler touches GLPI.
  *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nextoolsolutions/mcp-glpi-core",
-  "version": "1.3.1",
+  "version": "1.3.2",
   "description": "Shared infrastructure for the GLPI MCP servers: HTTP transport with retry, typed errors, tool-result helpers, write policy, payload formatting and idempotency.",
   "type": "module",
   "main": "dist/index.js",