@oobe-protocol-labs/sap-mcp-server 0.2.1 → 0.7.0

package/USER_DOCS/04_CLIENT_CONFIGS.md

@@ -2,7 +2,8 @@
 
 ## 1. Hosted Remote MCP
 
-Use this when the client supports remote Streamable HTTP MCP:
+Use this when the client supports remote Streamable HTTP MCP and expects a root
+`mcpServers` object. Do not paste this JSON into Codex `config.toml`.
 
 ```json
 {
@@ -15,7 +16,88 @@ Use this when the client supports remote Streamable HTTP MCP:
 }
 ```
 
-## 2. Local Stdio MCP
+## 2. Hosted Codex TOML
+
+Codex supports Streamable HTTP MCP servers and uses TOML config, usually at:
+
+- macOS/Linux: `~/.codex/config.toml`
+- Windows: `%USERPROFILE%\.codex\config.toml`
+
+Use this hosted remote entry:
+
+```toml
+[mcp_servers.sap]
+url = "https://mcp.sap.oobeprotocol.ai/mcp"
+```
+
+Paid/write tools also need a local non-custodial payment bridge. The wizard can
+write both entries automatically. Choose:
+
+```txt
+Configure Codex automatically: hosted sap + local sap_payments bridge
+```
+
+The final Codex setup should look like this:
+
+```toml
+[mcp_servers.sap]
+url = "https://mcp.sap.oobeprotocol.ai/mcp"
+
+[mcp_servers.sap_payments]
+command = "npx.cmd"
+args = ["--yes", "--package", "@oobe-protocol-labs/sap-mcp-server", "sap-mcp-server"]
+enabled_tools = ["sap_x402_paid_call", "sap_profile_current", "sap_x402_estimate_cost"]
+tool_timeout_sec = 300
+
+[mcp_servers.sap_payments.env]
+SAP_MCP_ALLOW_ENV_CONFIG_OVERRIDE = "false"
+SAP_ALLOWED_TOOLS = "sap_x402_paid_call,sap_profile_current,sap_x402_estimate_cost"
+SAP_LOG_LEVEL = "info"
+```
+
+On macOS/Linux, use `command = "npx"` instead of `npx.cmd`.
+
+Restart Codex after editing the file. Do not paste the JSON `mcpServers`
+snippet into Codex; Codex expects TOML. If you specifically want Codex to start
+the complete local stdio SAP MCP process instead of using the hosted endpoint, use:
+
+```toml
+[mcp_servers.sap]
+command = "npx.cmd"
+args = ["--yes", "--package", "@oobe-protocol-labs/sap-mcp-server", "sap-mcp-server"]
+
+[mcp_servers.sap.env]
+SAP_MCP_ALLOW_ENV_CONFIG_OVERRIDE = "false"
+SAP_LOG_LEVEL = "info"
+```
+
+On macOS/Linux, use `command = "npx"` instead of `npx.cmd`.
+
+## 3. Hosted Hermes Configs
+
+Hermes global `~/.hermes/mcp.json` uses flat server entries:
+
+```json
+{
+  "sap": {
+    "url": "https://mcp.sap.oobeprotocol.ai/mcp",
+    "transport": "streamable-http"
+  }
+}
+```
+
+Hermes profile YAML uses `mcp_servers` with a flat server block:
+
+```yaml
+mcp_servers:
+  sap:
+    url: https://mcp.sap.oobeprotocol.ai/mcp
+    transport: streamable-http
+```
+
+Do not nest `mcpServers.sap` inside a Hermes `mcp_servers.sap` block.
+
+## 4. Local Stdio MCP
 
 Use this when the client requires stdio:
 
@@ -27,15 +109,15 @@ Use this when the client requires stdio:
       "args": ["/absolute/path/to/sap-mcp-server/dist/bin/sap-mcp-server.js"],
       "cwd": "/absolute/path/to/sap-mcp-server",
       "env": {
-        "SAP_MCP_PROFILE": "default",
-        "SAP_MCP_LOG_LEVEL": "info"
+        "SAP_MCP_ALLOW_ENV_CONFIG_OVERRIDE": "false",
+        "SAP_LOG_LEVEL": "info"
       }
     }
   }
 }
 ```
 
-## 3. Hermes YAML Concept
+## 5. Local Hermes YAML Concept
 
 ```yaml
 mcp_servers:
@@ -45,11 +127,11 @@ mcp_servers:
       - /absolute/path/to/sap-mcp-server/dist/bin/sap-mcp-server.js
     cwd: /absolute/path/to/sap-mcp-server
     env:
-      SAP_MCP_PROFILE: default
-      SAP_MCP_LOG_LEVEL: info
+      SAP_MCP_ALLOW_ENV_CONFIG_OVERRIDE: "false"
+      SAP_LOG_LEVEL: info
 ```
 
-## 4. Codex TOML Concept
+## 6. Local Codex TOML Concept
 
 ```toml
 [mcp_servers.sap]
@@ -58,11 +140,11 @@ args = ["/absolute/path/to/sap-mcp-server/dist/bin/sap-mcp-server.js"]
 cwd = "/absolute/path/to/sap-mcp-server"
 
 [mcp_servers.sap.env]
-SAP_MCP_PROFILE = "default"
-SAP_MCP_LOG_LEVEL = "info"
+SAP_MCP_ALLOW_ENV_CONFIG_OVERRIDE = "false"
+SAP_LOG_LEVEL = "info"
 ```
 
-## 5. Wizard Injection
+## 7. Wizard Injection
 
 The wizard can automatically detect and update supported client config files. If a SAP MCP entry already exists, the wizard should show the existing config and ask whether to merge, override, skip, or print manual instructions.
 
@@ -71,3 +153,74 @@ Run:
 ```bash
 npm exec --yes --package @oobe-protocol-labs/sap-mcp-server -- sap-mcp-config wizard
 ```
+
+## 8. x402 Paid-Call Addon
+
+Hosted SAP MCP paid tools return an x402 challenge. Some agent runtimes expose remote MCP tools but do not yet have a native x402 replay path. The wizard can install a local addon bundle for Hermes, Claude, Codex, OpenClaw, or custom runtimes:
+
+```txt
+~/.config/mcp-sap/addons/x402-paid-call
+```
+
+The addon command is:
+
+```bash
+npm exec --yes --package @oobe-protocol-labs/sap-mcp-server -- sap-mcp-x402-paid-call \
+  --tool sap_list_all_agents \
+  --arguments '{"limit":5}' \
+  --max-usd 0.02 \
+  --confirm
+```
+
+For Codex, the recommended runtime integration is the local `sap_payments` MCP
+bridge shown above. It exposes only:
+
+```txt
+sap_x402_paid_call
+sap_profile_current
+sap_x402_estimate_cost
+```
+
+For Claude Code, use the official MCP CLI pattern:
+
+```bash
+claude mcp add --transport http sap https://mcp.sap.oobeprotocol.ai/mcp
+claude mcp add --transport stdio sap_payments -- npx --yes --package @oobe-protocol-labs/sap-mcp-server sap-mcp-server
+```
+
+Set `SAP_ALLOWED_TOOLS=sap_x402_paid_call,sap_profile_current,sap_x402_estimate_cost`
+in the local bridge environment if your Claude runtime exposes environment
+configuration. This keeps the local bridge focused on payment retries.
+
+Hermes plugin/addon concept:
+
+```json
+{
+  "plugins": {
+    "x402_paid_call": {
+      "command": "sap-mcp-x402-paid-call",
+      "description": "Pay and retry hosted SAP MCP x402 tool calls with the active local SAP MCP profile.",
+      "args": [],
+      "env": {
+        "SAP_MCP_ALLOW_ENV_CONFIG_OVERRIDE": "false"
+      }
+    }
+  }
+}
+```
+
+Local MCP tool alternative:
+
+```json
+{
+  "name": "sap_x402_paid_call",
+  "arguments": {
+    "toolName": "sap_list_all_agents",
+    "arguments": { "limit": 5 },
+    "maxPriceUsd": 0.02,
+    "confirm": true
+  }
+}
+```
+
+Do not add wallet paths, keypair bytes, RPC API keys, or profile-specific overrides to hosted MCP client config. Hosted MCP config points to `https://mcp.sap.oobeprotocol.ai/mcp`; the local addon/profile signs only the payment payload on the user's machine.

package/USER_DOCS/06_DESKTOP_GUI_WIZARD.md

@@ -0,0 +1,262 @@
+# Desktop GUI Wizard
+
+## 1. What It Is
+
+The SAP MCP Desktop Wizard is the normie-friendly installer for users who do not want to edit MCP JSON, TOML, or YAML by hand.
+
+It creates the same real SAP MCP profile as the CLI/TUI wizard:
+
+- a named profile under `~/.config/mcp-sap`;
+- a dedicated local SAP MCP wallet or external signer boundary;
+- conservative policy limits;
+- hosted MCP config for `https://mcp.sap.oobeprotocol.ai/mcp`;
+- optional local x402 paid-call bridge for agent runtimes.
+
+The desktop app is not a mock installer. It calls the same setup modules used by `sap-mcp-config wizard`.
+
+The first screen lets you choose one of two modes:
+
+| Mode | Use It When |
+| --- | --- |
+| **Full SAP MCP setup** | You are creating or refreshing a SAP MCP profile, wallet boundary, policy limits, hosted MCP entry, and x402 payment bridge. |
+| **Install x402 payment client only** | You already have `~/.config/mcp-sap` configured, hosted tools are visible, but paid/write calls still return `payment_required`. |
+
+## 2. When To Use It
+
+Use the desktop wizard when:
+
+1. You want hosted SAP MCP but local signing.
+2. You are setting up Codex, Hermes, Claude, OpenClaw, or another MCP client.
+3. You need paid/write tools to work through x402.
+4. You want a dedicated SAP MCP wallet separate from Solana CLI.
+5. You prefer a guided GUI instead of terminal prompts.
+
+Use the CLI wizard instead when you are on a server, SSH session, CI environment, or headless machine.
+
+## 3. Download Options
+
+The hosted endpoint exposes the installer descriptor:
+
+```txt
+https://mcp.sap.oobeprotocol.ai/.well-known/sap-mcp-wizard.json
+```
+
+Release artifacts are published on GitHub releases:
+
+```txt
+https://github.com/OOBE-PROTOCOL/sap-mcp/releases
+```
+
+Expected artifacts:
+
+| Platform | Artifact |
+| --- | --- |
+| macOS | `SAP-MCP-Wizard-<version>-<arch>.dmg` or `.zip` |
+| Windows | `SAP-MCP-Wizard-Setup-<version>-x64.exe` |
+| Linux | `sap-mcp-wizard-<version>-<arch>.tar.gz` |
+
+macOS builds must be signed and notarized for a zero-warning double-click install after downloading from Chrome, Safari, or another browser. Free public builds are ad-hoc signed but not Apple-notarized, so macOS may block them as "damaged" until you remove the quarantine flag.
+
+For an unsigned SAP MCP Wizard build that you downloaded from the official GitHub release, copy the app to `/Applications`, then run:
+
+```bash
+xattr -dr com.apple.quarantine "/Applications/SAP MCP Wizard.app"
+```
+
+Then open the app again from Finder.
+
+Do not paste wallet/keypair material into support chats while troubleshooting installer issues.
+
+## 4. GUI Flow
+
+The desktop wizard walks through:
+
+1. **Setup**: choose full setup or x402 payment-client-only repair.
+2. **Profile**: choose a real profile name; the wizard refuses ambiguous `default` profiles.
+3. **Wallet**: create a dedicated SAP MCP wallet or point to an existing dedicated keypair path.
+4. **Policy**: set max transaction value, daily limits, log level, and optional Bento Guard settings.
+5. **Runtimes**: detect local agent runtimes and configure hosted SAP MCP plus local `sap_payments`.
+6. **Review**: show config path, wallet boundary, hosted MCP endpoint, and runtime actions before writing.
+
+In x402 payment-client-only mode, the wizard skips profile, wallet, and policy steps. It only installs or repairs runtime MCP client entries and the optional addon bundle.
+
+The renderer never receives keypair bytes. Wallet creation and file writes happen in the local main process.
+
+## 5. Codex Setup From GUI
+
+For Codex, the desktop wizard can write both entries:
+
+```toml
+[mcp_servers.sap]
+url = "https://mcp.sap.oobeprotocol.ai/mcp"
+
+[mcp_servers.sap_payments]
+command = "npx"
+args = ["--yes", "--package", "@oobe-protocol-labs/sap-mcp-server", "sap-mcp-server"]
+enabled_tools = ["sap_x402_paid_call", "sap_profile_current", "sap_x402_estimate_cost"]
+tool_timeout_sec = 300
+
+[mcp_servers.sap_payments.env]
+SAP_MCP_ALLOW_ENV_CONFIG_OVERRIDE = "false"
+SAP_ALLOWED_TOOLS = "sap_x402_paid_call,sap_profile_current,sap_x402_estimate_cost"
+SAP_LOG_LEVEL = "info"
+```
+
+On Windows, the command is `npx.cmd`.
+
+The hosted `sap` server lists and executes remote SAP MCP tools. The local `sap_payments` bridge signs x402 payment proofs with the active local SAP MCP profile and retries paid hosted calls without exposing keypair bytes.
+
+## 6. Runtime Configs Written By The GUI
+
+The GUI writes runtime-native config shapes. It does not paste profile names, wallet paths, RPC API keys, or keypair bytes into hosted MCP entries.
+
+### 6.1 Claude Desktop
+
+Claude Desktop uses a root `mcpServers` JSON object:
+
+```json
+{
+  "mcpServers": {
+    "sap": {
+      "type": "http",
+      "url": "https://mcp.sap.oobeprotocol.ai/mcp"
+    },
+    "sap_payments": {
+      "command": "npx",
+      "args": ["--yes", "--package", "@oobe-protocol-labs/sap-mcp-server", "sap-mcp-server"],
+      "env": {
+        "SAP_MCP_ALLOW_ENV_CONFIG_OVERRIDE": "false",
+        "SAP_ALLOWED_TOOLS": "sap_x402_paid_call,sap_profile_current,sap_x402_estimate_cost",
+        "SAP_LOG_LEVEL": "info"
+      }
+    }
+  }
+}
+```
+
+Known paths:
+
+| OS | Path |
+| --- | --- |
+| macOS | `~/Library/Application Support/Claude/claude_desktop_config.json` |
+| Windows | `%USERPROFILE%\AppData\Roaming\Claude\claude_desktop_config.json` |
+| Linux | `~/.config/Claude/claude_desktop_config.json` |
+
+### 6.2 Hermes
+
+Hermes global `mcp.json` uses flat server entries:
+
+```json
+{
+  "sap": {
+    "url": "https://mcp.sap.oobeprotocol.ai/mcp",
+    "transport": "streamable-http"
+  },
+  "sap_payments": {
+    "command": "npx",
+    "args": ["--yes", "--package", "@oobe-protocol-labs/sap-mcp-server", "sap-mcp-server"],
+    "env": {
+      "SAP_MCP_ALLOW_ENV_CONFIG_OVERRIDE": "false",
+      "SAP_ALLOWED_TOOLS": "sap_x402_paid_call,sap_profile_current,sap_x402_estimate_cost",
+      "SAP_LOG_LEVEL": "info"
+    }
+  }
+}
+```
+
+Hermes profile YAML uses top-level `mcp_servers`:
+
+```yaml
+mcp_servers:
+  sap:
+    url: https://mcp.sap.oobeprotocol.ai/mcp
+    transport: streamable-http
+  sap_payments:
+    command: npx
+    args:
+      - --yes
+      - --package
+      - @oobe-protocol-labs/sap-mcp-server
+      - sap-mcp-server
+    env:
+      SAP_MCP_ALLOW_ENV_CONFIG_OVERRIDE: "false"
+      SAP_ALLOWED_TOOLS: sap_x402_paid_call,sap_profile_current,sap_x402_estimate_cost
+      SAP_LOG_LEVEL: info
+```
+
+### 6.3 OpenClaw
+
+OpenClaw MCP JSON uses the same root `mcpServers` structure as generic MCP clients:
+
+```json
+{
+  "mcpServers": {
+    "sap": {
+      "url": "https://mcp.sap.oobeprotocol.ai/mcp",
+      "transport": "streamable-http"
+    },
+    "sap_payments": {
+      "command": "npx",
+      "args": ["--yes", "--package", "@oobe-protocol-labs/sap-mcp-server", "sap-mcp-server"],
+      "env": {
+        "SAP_MCP_ALLOW_ENV_CONFIG_OVERRIDE": "false",
+        "SAP_ALLOWED_TOOLS": "sap_x402_paid_call,sap_profile_current,sap_x402_estimate_cost",
+        "SAP_LOG_LEVEL": "info"
+      }
+    }
+  }
+}
+```
+
+On Windows, command-backed bridge entries use `npx.cmd`.
+
+## 7. x402 Client Addon
+
+The GUI can also install the x402 addon bundle under:
+
+```txt
+~/.config/mcp-sap/addons/x402-paid-call
+```
+
+Direct helper command:
+
+```bash
+npm exec --yes --package @oobe-protocol-labs/sap-mcp-server -- sap-mcp-x402-paid-call \
+  --tool sap_list_all_agents \
+  --arguments '{"limit":5}' \
+  --max-usd 0.02 \
+  --confirm
+```
+
+Use the helper when your agent runtime can see hosted tools but cannot natively sign and replay x402 challenges.
+
+## 8. CLI Fallback
+
+The same setup can always be done from terminal:
+
+```bash
+npm exec --yes --package @oobe-protocol-labs/sap-mcp-server -- sap-mcp-config wizard
+```
+
+Show active profile:
+
+```bash
+npm exec --yes --package @oobe-protocol-labs/sap-mcp-server -- sap-mcp-config show
+```
+
+Install from hosted script:
+
+```bash
+curl -fsSL https://mcp.sap.oobeprotocol.ai/wizard/install.sh | bash
+```
+
+Read the script before running it when operating in a security-sensitive environment.
+
+## 9. Security Rules
+
+1. Do not paste keypair bytes into agent chat, MCP config, GitHub issues, or support tickets.
+2. Do not configure hosted MCP with `SAP_WALLET_PATH` or RPC API-key overrides.
+3. Keep the SAP MCP wallet separate from `~/.config/solana/id.json`.
+4. Use the local `sap_payments` bridge only for x402 helper tools.
+5. Restart the agent runtime after the wizard updates client config.
+6. For production wallets, prefer external signer or delegated session mode once available for your runtime.

package/dist/adapters/mcp/sdk-compat.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sdk-compat.d.ts","sourceRoot":"","sources":["../../../src/adapters/mcp/sdk-compat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,KAAK,EACV,IAAI,EACJ,QAAQ,EACR,gBAAgB,EAChB,MAAM,EACP,MAAM,oCAAoC,CAAC;AAW5C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAsBzD,KAAK,eAAe,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;AAC9C,KAAK,uBAAuB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAChG,KAAK,aAAa,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AA8GzE;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,IAAI,CAEpF;AAqOD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,GAAG,OAAO,EAC3C,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE;IACV,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;CACtB,EACD,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmF7C;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,OAAO,EACf,UAAU,EAAE;IACV,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,EACD,OAAO,EAAE,eAAe;;;;;;;;;;;;;;;;;;;;;EA0DzB;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,OAAO,EACf,UAAU,EAAE;IACV,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,EACD,OAAO,EAAE,uBAAuB;;;;;;;;;;;;;;;;;;;;EAmGjC;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,OAAO,EACf,UAAU,EAAE;IACV,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,KAAK,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC,CAAC;CACJ,EACD,OAAO,EAAE,aAAa;;;;;;;;;;;;;;;;;;EAmEvB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,CAEzD;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,EAAE,CAEjE;AAED;;GAEG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAEjF;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAE7D;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG;IAChD,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;CAClB,CAGA"}
+{"version":3,"file":"sdk-compat.d.ts","sourceRoot":"","sources":["../../../src/adapters/mcp/sdk-compat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,KAAK,EACV,IAAI,EACJ,QAAQ,EACR,gBAAgB,EAChB,MAAM,EACP,MAAM,oCAAoC,CAAC;AAW5C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAuBzD,KAAK,eAAe,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;AAC9C,KAAK,uBAAuB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAChG,KAAK,aAAa,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AA8GzE;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,IAAI,CAEpF;AAmPD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,GAAG,OAAO,EAC3C,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE;IACV,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;CACtB,EACD,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoF7C;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,OAAO,EACf,UAAU,EAAE;IACV,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,EACD,OAAO,EAAE,eAAe;;;;;;;;;;;;;;;;;;;;;EA0DzB;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,OAAO,EACf,UAAU,EAAE;IACV,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,EACD,OAAO,EAAE,uBAAuB;;;;;;;;;;;;;;;;;;;;EAmGjC;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,OAAO,EACf,UAAU,EAAE;IACV,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,KAAK,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC,CAAC;CACJ,EACD,OAAO,EAAE,aAAa;;;;;;;;;;;;;;;;;;EAmEvB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,CAEzD;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,EAAE,CAEjE;AAED;;GAEG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAEjF;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAE7D;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG;IAChD,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;CAClB,CAGA"}

package/dist/adapters/mcp/sdk-compat.js

@@ -15,6 +15,7 @@
 import { ListToolsRequestSchema, CallToolRequestSchema, ListResourcesRequestSchema, ReadResourceRequestSchema, ListResourceTemplatesRequestSchema, ListPromptsRequestSchema, GetPromptRequestSchema, } from '@modelcontextprotocol/sdk/types.js';
 import { logger } from '../../core/logger.js';
 import { checkToolPermissions, privateKeyGuard } from '../../security/index.js';
+import { canonicalizeToolName } from '../../tools/tool-aliases.js';
 // Track which handlers have been registered to avoid duplicates
 const handlerRegistry = new WeakMap();
 const executionContexts = new WeakMap();
@@ -288,6 +289,18 @@ function ensureHandlerRegistry(server) {
     }
     return handlerRegistry.get(server);
 }
+/**
+ * @name filterVisibleTools
+ * @description Applies the configured allow-list to tools/list so bridge-only MCP clients do not see the full tool surface.
+ */
+function filterVisibleTools(server, tools) {
+    const context = executionContexts.get(server);
+    if (!context || context.config.allowedTools === 'all') {
+        return tools;
+    }
+    const allowed = new Set(context.config.allowedTools);
+    return tools.filter((tool) => allowed.has(tool.name));
+}
 /**
  * Tool registration helper
  *
@@ -313,18 +326,19 @@ export function registerTool(server, name, definition, handler) {
     if (!registry.tools) {
         // Register tools/list handler
         server.setRequestHandler(ListToolsRequestSchema, async () => {
-            const tools = withRegistrationStore(server).tools || [];
+            const tools = filterVisibleTools(server, withRegistrationStore(server).tools || []);
             logger.debug('Handling tools/list', { count: tools.length });
             return { tools };
         });
         // Register tools/call handler
         server.setRequestHandler(CallToolRequestSchema, async (request) => {
             const { name: toolName, arguments: args } = request.params;
-            logger.debug('Handling tools/call', { tool: toolName, args });
+            const canonicalToolName = canonicalizeToolName(toolName);
+            logger.debug('Handling tools/call', { tool: toolName, canonicalTool: canonicalToolName, args });
             const handlers = withRegistrationStore(server).toolHandlers || {};
-            const handler = handlers[toolName];
+            const handler = handlers[canonicalToolName];
             if (!handler) {
-                logger.error('Tool not found', { tool: toolName });
+                logger.error('Tool not found', { tool: toolName, canonicalTool: canonicalToolName });
                 throw new Error(`Tool not found: ${toolName}`);
             }
             try {
@@ -332,35 +346,35 @@ export function registerTool(server, name, definition, handler) {
                 if (context) {
                     const keyGuard = privateKeyGuard(args || {});
                     if (!keyGuard.safe) {
-                        logger.warn('Tool call blocked by private key guard', { tool: toolName, reason: keyGuard.reason });
+                        logger.warn('Tool call blocked by private key guard', { tool: canonicalToolName, requestedTool: toolName, reason: keyGuard.reason });
                         throw new Error(keyGuard.reason || 'Potential private key detected');
                     }
-                    const permission = checkToolPermissions(context, toolName);
+                    const permission = checkToolPermissions(context, canonicalToolName);
                     if (!permission.allowed) {
-                        logger.warn('Tool call blocked by permissions', { tool: toolName, reason: permission.reason });
-                        throw new Error(permission.reason || `Tool '${toolName}' is not allowed`);
+                        logger.warn('Tool call blocked by permissions', { tool: canonicalToolName, requestedTool: toolName, reason: permission.reason });
+                        throw new Error(permission.reason || `Tool '${canonicalToolName}' is not allowed`);
                     }
-                    const policy = await context.policyEngine.checkPermission(toolName, {
-                        toolName,
+                    const policy = await context.policyEngine.checkPermission(canonicalToolName, {
+                        toolName: canonicalToolName,
                         args: isPlainObject(args) ? args : {},
                         user: context.signer?.publicKey.toBase58() || context.session?.agentId || 'local-mcp-client',
                     });
                     if (!policy.allowed) {
-                        logger.warn('Tool call blocked by policy', { tool: toolName, reason: policy.reason });
-                        throw new Error(policy.reason || `Tool '${toolName}' is blocked by policy`);
+                        logger.warn('Tool call blocked by policy', { tool: canonicalToolName, requestedTool: toolName, reason: policy.reason });
+                        throw new Error(policy.reason || `Tool '${canonicalToolName}' is blocked by policy`);
                     }
                 }
                 const result = await handler(args || {});
-                logger.debug('Tool call completed', { tool: toolName });
+                logger.debug('Tool call completed', { tool: canonicalToolName, requestedTool: toolName });
                 return toToolCallResult(result);
             }
             catch (error) {
-                logger.error('Tool call failed', { tool: toolName, error });
+                logger.error('Tool call failed', { tool: canonicalToolName, requestedTool: toolName, error });
                 throw error;
             }
         });
         registry.tools = true;
-        logger.info('JSON-RPC handlers registered for tools');
+        logger.debug('JSON-RPC handlers registered for tools');
     }
     return tool;
 }
@@ -414,7 +428,7 @@ export function registerResource(server, uri, schema, definition, handler) {
             }
         });
         registry.resources = true;
-        logger.info('JSON-RPC handlers registered for resources');
+        logger.debug('JSON-RPC handlers registered for resources');
     }
     return resource;
 }
@@ -505,7 +519,7 @@ export function registerResourceTemplate(server, uriTemplate, schema, definition
             throw new Error(`Resource not found: ${resourceUri}`);
         });
         registry.resources = true;
-        logger.info('JSON-RPC handlers registered for resource templates');
+        logger.debug('JSON-RPC handlers registered for resource templates');
     }
     return template;
 }
@@ -568,7 +582,7 @@ export function registerPrompt(server, name, schema, definition, handler) {
             }
         });
         registry.prompts = true;
-        logger.info('JSON-RPC handlers registered for prompts');
+        logger.debug('JSON-RPC handlers registered for prompts');
     }
     return prompt;
 }