@payware/mcp-server 1.3.0 → 1.3.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 payware LLC
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -4,6 +4,8 @@
 
 Official MCP (Model Context Protocol) server for payware payment API integration. This server enables AI assistants to interact with payware APIs, automating integration workflows for all partner types.
 
+Releases are published to npm as `@payware/mcp-server` and to the official [MCP Registry](https://registry.modelcontextprotocol.io) as `io.github.payware/mcp-server`. MIT licensed, see [LICENSE](LICENSE).
+
 ## Who Is This For?
 
 - **Merchants** - Accept payments, manage products, generate transaction reports

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@payware/mcp-server",
-  "version": "1.3.0",
+  "version": "1.3.1",
+  "mcpName": "io.github.payware/mcp-server",
   "description": "Official MCP server for payware payment API integration",
   "main": "src/index.js",
   "type": "module",
@@ -36,15 +37,18 @@
     "model-context-protocol",
     "payware",
     "payments",
-    "payment-gateway",
-    "payment-processing",
     "api",
     "fintech",
     "pos",
     "terminal",
     "merchant",
     "isv",
-    "oauth2"
+    "oauth2",
+    "a2a-payments",
+    "account-to-account",
+    "instant-payments",
+    "transaction-resolution",
+    "qr-code-payments"
   ],
   "author": "payware <support@payware.com>",
   "license": "MIT",

package/src/proxy-server.js

@@ -25,9 +25,16 @@ class PaywareMCPProxy {
   }
 
   setupMiddleware() {
-    // Enable CORS for all routes
+    // SEC-018: CORS was `origin: true` with credentials - it reflected ANY requesting origin, so any
+    // web page the operator visited could drive these routes from their browser. The routes below
+    // mint JWTs with the configured partner's private key and call the payware API as that partner,
+    // so this is not a cosmetic default. Restricted to explicit local origins; set
+    // PAYWARE_MCP_PROXY_ORIGINS (comma-separated) to widen it deliberately.
+    const allowedOrigins = (process.env.PAYWARE_MCP_PROXY_ORIGINS
+      || `http://localhost:${this.port},http://127.0.0.1:${this.port}`)
+      .split(',').map((o) => o.trim()).filter(Boolean);
     this.app.use(cors({
-      origin: true,
+      origin: allowedOrigins,
       credentials: true
     }));
     
@@ -168,8 +175,22 @@ class PaywareMCPProxy {
   }
 
   async start() {
-    this.app.listen(this.port, '0.0.0.0', () => {
-      console.log(`🚀 payware MCP Proxy Server running on http://0.0.0.0:${this.port}`);
+    // SEC-018: loopback by default. This bound 0.0.0.0 - every interface - with no authentication on
+    // /tools, /tools/:toolName or /mcp, each of which spawns the MCP server with the process env
+    // (PAYWARE_PARTNER_ID and the sandbox/production private key paths) and can therefore sign as
+    // that partner. On a shared dev host or an office LAN that is partner impersonation over plain
+    // HTTP, and with a production key it is total. The stdio transport (mcp-proxy.js) is the normal
+    // path and opens no socket at all.
+    //
+    // A wider bind is now an explicit opt-in via PAYWARE_MCP_PROXY_HOST, so exposing it is a
+    // decision someone made rather than the default they inherited.
+    const host = process.env.PAYWARE_MCP_PROXY_HOST || '127.0.0.1';
+    if (host !== '127.0.0.1' && host !== 'localhost') {
+      console.warn(`⚠️  MCP proxy binding ${host} - these routes are UNAUTHENTICATED and can sign as `
+        + `the configured partner. Only do this on a network you control.`);
+    }
+    this.app.listen(this.port, host, () => {
+      console.log(`🚀 payware MCP Proxy Server running on http://${host}:${this.port}`);
       console.log(`📚 API Documentation: http://localhost:${this.port}`);
       console.log(`🔧 Health Check: http://localhost:${this.port}/health`);
       console.log(`🛠️  Tools List: http://localhost:${this.port}/tools`);