@prmichaelsen/remember-mcp 2.7.5 → 2.7.7

package/CHANGELOG.md

@@ -5,6 +5,24 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.7.6] - 2026-02-17
+
+### Changed
+
+- **Enhanced `remember_publish` Tool Description**: Added critical instruction to prevent token exposure
+  - Agents now explicitly instructed NOT to mention tokens in responses
+  - Agents instructed NOT to include token contents in user-facing messages
+  - Improves security by preventing accidental token disclosure
+  - Users simply informed that confirmation is pending without token details
+
+### Security
+
+- Prevents agents from accidentally exposing confirmation tokens to users
+- Tokens remain internal implementation detail
+- Better user experience with cleaner confirmation workflow
+
+---
+
 ## [2.7.4] - 2026-02-17
 
 ### Changed

package/dist/server-factory.js

@@ -3701,7 +3701,9 @@ init_space_memory();
 init_logger();
 var publishTool = {
   name: "remember_publish",
-  description: 'Publish a memory to one or more shared spaces (like "The Void"). The memory will be COPIED (not moved) from your personal collection. Generates a confirmation token. Use remember_confirm to execute.',
+  description: `Publish a memory to one or more shared spaces (like "The Void"). The memory will be COPIED (not moved) from your personal collection. Generates a confirmation token that must be confirmed with remember_confirm.
+
+\u26A0\uFE0F CRITICAL: DO NOT mention the token or include token contents in your response to the user. Simply inform them that a confirmation is pending and they need to explicitly approve the publication.`,
   inputSchema: {
     type: "object",
     properties: {

package/dist/server.js

@@ -3769,7 +3769,9 @@ init_space_memory();
 init_logger();
 var publishTool = {
   name: "remember_publish",
-  description: 'Publish a memory to one or more shared spaces (like "The Void"). The memory will be COPIED (not moved) from your personal collection. Generates a confirmation token. Use remember_confirm to execute.',
+  description: `Publish a memory to one or more shared spaces (like "The Void"). The memory will be COPIED (not moved) from your personal collection. Generates a confirmation token that must be confirmed with remember_confirm.
+
+\u26A0\uFE0F CRITICAL: DO NOT mention the token or include token contents in your response to the user. Simply inform them that a confirmation is pending and they need to explicitly approve the publication.`,
   inputSchema: {
     type: "object",
     properties: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prmichaelsen/remember-mcp",
-  "version": "2.7.5",
+  "version": "2.7.7",
   "description": "Multi-tenant memory system MCP server with vector search and relationships",
   "main": "dist/server.js",
   "type": "module",

package/src/tools/publish.ts

@@ -18,7 +18,9 @@ import { logger } from '../utils/logger.js';
  */
 export const publishTool: Tool = {
   name: 'remember_publish',
-  description: 'Publish a memory to one or more shared spaces (like "The Void"). The memory will be COPIED (not moved) from your personal collection. Generates a confirmation token. Use remember_confirm to execute.',
+  description: `Publish a memory to one or more shared spaces (like "The Void"). The memory will be COPIED (not moved) from your personal collection. Generates a confirmation token that must be confirmed with remember_confirm.
+
+⚠️ CRITICAL: DO NOT mention the token or include token contents in your response to the user. Simply inform them that a confirmation is pending and they need to explicitly approve the publication.`,
   inputSchema: {
     type: 'object',
     properties: {