@noresponse/mcp 0.4.12 → 0.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (6) hide show
  1. package/CHANGELOG.md +31 -0
  2. package/README.md +5 -1
  3. package/bin/mcp-server.js +925 -39
  4. package/bin/mcp-server.js.map +35 -9
  5. package/manifest.json +17 -1
  6. package/package.json +1 -1
package/CHANGELOG.md CHANGED
@@ -1,5 +1,36 @@
1
1
  # Changelog
2
2
 
3
+ ## 0.5.0
4
+
5
+ * `SDK.accounts.recordEnforcement()`: `response.code` **Changed** (Breaking ⚠️)
6
+ * `SDK.webhookEndpoints.delete()`: `response.code` **Changed** (Breaking ⚠️)
7
+ * `SDK.webhookEndpoints.replayDelivery()`: `response.code` **Changed** (Breaking ⚠️)
8
+ * `SDK.webhookEndpoints.listDeliveries()`: `response.code` **Changed** (Breaking ⚠️)
9
+ * `SDK.webhookEndpoints.sendTestEvent()`: `response.code` **Changed** (Breaking ⚠️)
10
+ * `SDK.assessments.create()`: `response.code` **Changed** (Breaking ⚠️)
11
+ * `SDK.assessments.get()`: `response.code` **Changed** (Breaking ⚠️)
12
+ * `SDK.assessments.delete()`: `response.code` **Changed** (Breaking ⚠️)
13
+ * `SDK.assessments.recordOutcome()`: `response.code` **Changed** (Breaking ⚠️)
14
+ * `SDK.assessments.query()`: `response.code` **Changed** (Breaking ⚠️)
15
+ * `SDK.accounts.listChanged()`: `response.code` **Changed** (Breaking ⚠️)
16
+ * `SDK.accounts.get()`: `response.code` **Changed** (Breaking ⚠️)
17
+ * `SDK.webhookEndpoints.rotateSigningKey()`: `response.code` **Changed** (Breaking ⚠️)
18
+ * `SDK.accounts.delete()`: `response.code` **Changed** (Breaking ⚠️)
19
+ * `SDK.accounts.listAssessments()`: `response.code` **Changed** (Breaking ⚠️)
20
+ * `SDK.keyUsage.record()`: `response.code` **Changed** (Breaking ⚠️)
21
+ * `SDK.keys.rotate()`: `response` **Changed** (Breaking ⚠️)
22
+ * `SDK.integrations.create()`: `response.code` **Changed** (Breaking ⚠️)
23
+ * `SDK.integrations.list()`: `response.code` **Changed** (Breaking ⚠️)
24
+ * `SDK.integrations.delete()`: `response.code` **Changed** (Breaking ⚠️)
25
+ * `SDK.integrations.rotate()`: `response.code` **Changed** (Breaking ⚠️)
26
+ * `SDK.webhookEndpoints.list()`: `response.code` **Changed** (Breaking ⚠️)
27
+ * `SDK.webhookEndpoints.create()`: `response.code` **Changed** (Breaking ⚠️)
28
+ * `SDK.settings.update()`: **Added**
29
+ * `SDK.keys.list()`: **Added**
30
+ * `SDK.keys.create()`: **Added**
31
+ * `SDK.settings.get()`: **Added**
32
+ * `SDK.keys.revoke()`: **Added**
33
+
3
34
  ## 0.4.12
4
35
 
5
36
  No changes detected.
package/README.md CHANGED
@@ -4,7 +4,7 @@
4
4
 
5
5
  An [MCP](https://modelcontextprotocol.io) server for the NoResponse API, so an agent can assess an account creation, login or purchase, wait for a pending assessment, page through an account's history and record what you later learned. It is generated from the same OpenAPI document as the NoResponse SDKs.
6
6
 
7
- The server uses the API key you give it and stores nothing. API key rotation is not a tool: rotate keys from your own backend. The integration tools need a key with the `integrations` scope; give the server a key without it to keep them unusable.
7
+ The server uses the API key you give it and stores nothing. API key rotation and key creation are not tools: rotate and create keys from your own backend. The integration tools need a key with the `integrations` scope, and the key and settings tools a key with the `management` scope; give the server a key without them to keep them unusable.
8
8
 
9
9
  ## Tools
10
10
 
@@ -32,6 +32,10 @@ The server uses the API key you give it and stores nothing. API key rotation is
32
32
  | `list_integrations` | List the account's integrations, oldest first, with no secrets. | `GET /v1/integrations` |
33
33
  | `delete_integration` | Delete an integration; its endpoint answers 404 from then on. | `DELETE /v1/integrations/{integration_id}` |
34
34
  | `rotate_integration_secret` | Replace an integration's secret. The old one is accepted for 24 hours. Never retried. | `POST /v1/integrations/{integration_id}/rotate` |
35
+ | `list_keys` | List the keys of the key's environment, newest first, with no secrets. Needs the `management` scope. | `GET /v1/workspaces/{workspace_id}/keys` |
36
+ | `revoke_key` | Revoke a key of the key's environment at once. A key cannot revoke itself. Needs the `management` scope; marked destructive. | `DELETE /v1/workspaces/{workspace_id}/keys/{key_id}` |
37
+ | `get_settings` | Read the environment's retention, flow thresholds, admission and refused sources. Needs the `management` scope. | `GET /v1/workspaces/{workspace_id}/settings/{environment}` |
38
+ | `update_settings` | Change only what the body names, in one transaction. Needs the `management` scope. | `PATCH /v1/workspaces/{workspace_id}/settings/{environment}` |
35
39
 
36
40
  Act on `account.risk.decision` (`allow`, `step_up`, `review`, `block`, or `held` while a held flow waits for its investigation), the account's current decision for the assessment's flow. `detail` holds the assessment's own risk, recommendation and `assessment_version`. While the account's first assessment is pending, `account` is absent, so apply your own fallback for that, 429, 503 or a timeout.
37
41