@ogygie/mcp 0.10.1 → 0.10.2

package/dist/mcp.js

@@ -1527,17 +1527,23 @@ async function startHttpTransport(createServerInstance, options) {
   };
   const httpServer = createServer((request, response) => {
     if (!isAuthorized(request.headers.authorization, token, request.url)) {
-      refuse(
-        response,
-        401,
-        ogygieError({
-          code: "UNAUTHORIZED",
-          message: "This Ogygie MCP server requires a bearer token.",
-          file: null,
-          cause: "missing or wrong Authorization header",
-          suggestedFix: "Send `Authorization: Bearer <OGYGIE_MCP_TOKEN>`."
-        })
-      );
+      const announcedCredential = request.headers.authorization !== void 0;
+      if (announcedCredential) {
+        refuse(
+          response,
+          401,
+          ogygieError({
+            code: "UNAUTHORIZED",
+            message: "This Ogygie MCP server refused the credential it was given.",
+            file: null,
+            cause: "the Authorization header does not carry the expected bearer token",
+            suggestedFix: "Send `Authorization: Bearer <OGYGIE_MCP_TOKEN>`, or address the secret path `/mcp-<OGYGIE_MCP_TOKEN>`."
+          })
+        );
+        return;
+      }
+      response.writeHead(404, { "content-type": "application/json" });
+      response.end(JSON.stringify({ error: "not found" }));
       return;
     }
     const chunks = [];

package/dist/server.js

@@ -1522,17 +1522,23 @@ async function startHttpTransport(createServerInstance, options) {
   };
   const httpServer = createServer((request, response) => {
     if (!isAuthorized(request.headers.authorization, token, request.url)) {
-      refuse(
-        response,
-        401,
-        ogygieError({
-          code: "UNAUTHORIZED",
-          message: "This Ogygie MCP server requires a bearer token.",
-          file: null,
-          cause: "missing or wrong Authorization header",
-          suggestedFix: "Send `Authorization: Bearer <OGYGIE_MCP_TOKEN>`."
-        })
-      );
+      const announcedCredential = request.headers.authorization !== void 0;
+      if (announcedCredential) {
+        refuse(
+          response,
+          401,
+          ogygieError({
+            code: "UNAUTHORIZED",
+            message: "This Ogygie MCP server refused the credential it was given.",
+            file: null,
+            cause: "the Authorization header does not carry the expected bearer token",
+            suggestedFix: "Send `Authorization: Bearer <OGYGIE_MCP_TOKEN>`, or address the secret path `/mcp-<OGYGIE_MCP_TOKEN>`."
+          })
+        );
+        return;
+      }
+      response.writeHead(404, { "content-type": "application/json" });
+      response.end(JSON.stringify({ error: "not found" }));
       return;
     }
     const chunks = [];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ogygie/mcp",
-  "version": "0.10.1",
+  "version": "0.10.2",
   "description": "Ogygie MCP server: read-only access to the governance files and features of any Ogygie repo, the manifest as index. Ships built; runnable standalone or through `ogygie mcp`.",
   "license": "MIT",
   "type": "module",
@@ -28,7 +28,7 @@
     "tsx": "^4.20.0",
     "typescript": "^5.8.0",
     "vitest": "^3.2.0",
-    "@ogygie/core": "0.10.1"
+    "@ogygie/core": "0.10.2"
   },
   "scripts": {
     "typecheck": "tsc -p tsconfig.json",