@pyai/mcp 0.4.0 → 0.5.0

package/AGENT_GUIDE.md

@@ -72,3 +72,15 @@ the corresponding session. Read it with `omni_get_call`, `omni_get_summary`,
 `omni_get_transcript`, or `omni_get_recording` with `response: "url"`. Recording
 URLs require REST authentication and are not public download links. For inbound
 calls use `omni_list_calls`, filtering by `session_label`.
+
+## Discovery and identity output
+
+In MCP 0.5.0, use `discover_tools({"query":"voice agent"})`; `task` is an
+alias. If both are present, they must match after trimming. Omit both to list
+workflows. Empty or conflicting values return `invalid_arguments`.
+
+`whoami({})` returns concise text showing environment, scopes and account
+limits. Authorized organization, project and key IDs remain in structured
+output; `whoami({"verbose":true})` also includes them in text. This reduces
+prompt clutter, not host access to identity metadata. Credential-shaped fields
+are omitted in both modes. Never paste keys or full identity dumps into reports.

package/README.md

@@ -126,3 +126,15 @@ Calling reaches real phone destinations and is not a sandbox simulation.
 Use the SDK's `pyai.omni.connect({ rate, configure })` for realtime audio. The
 [Omni frame contract](https://api.pyai.com/omni-frames.json) is generated from
 the existing AsyncAPI protocol source.
+
+## Discovery and identity output
+
+In MCP 0.5.0, use `discover_tools({"query":"voice agent"})`; `task` is an
+alias. If both are present, they must match after trimming. Omit both to list
+workflows. Empty or conflicting values return `invalid_arguments`.
+
+`whoami({})` returns concise text showing environment, scopes and account
+limits. Authorized organization, project and key IDs remain in structured
+output; `whoami({"verbose":true})` also includes them in text. This reduces
+prompt clutter, not host access to identity metadata. Credential-shaped fields
+are omitted in both modes. Never paste keys or full identity dumps into reports.

package/dist/extra-tools.js

@@ -18,6 +18,7 @@ export const EXTRA_TOOLS = [
         description: "Find the right PyAI tools and a short recipe for a use case: speech, STT, voice agents, compliance, summaries, dubbing or narration. No credentials or usage.",
         inputSchema: obj({
             query: string("Product name or task, e.g. “translate audio”, “voice agent”, “TTS”."),
+            task: string("Alias for query. If both are supplied, they must match after trimming."),
         }),
     },
     {

package/dist/server.js

@@ -2,7 +2,7 @@ import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { CallToolRequestSchema, ListToolsRequestSchema, ListResourcesRequestSchema, ReadResourceRequestSchema, ListPromptsRequestSchema, GetPromptRequestSchema, McpError, ErrorCode, } from "@modelcontextprotocol/sdk/types.js";
 import { TOOLS, TOOL_SCOPES, callTool, localContext, } from "./tools.js";
 import { GUIDE, RESOURCES, SERVER_INSTRUCTIONS, WORKFLOWS, } from "./workflows.js";
-export const MCP_VERSION = "0.4.0";
+export const MCP_VERSION = "0.5.0";
 export function createMcpServer(client, context = localContext) {
     const server = new Server({
         name: "pyai",

package/dist/tools.js

@@ -45,6 +45,28 @@ function text(value) {
             : { text: s },
     };
 }
+// Keep authorized resource IDs available to integrations without filling the
+// default conversational text with identity metadata. Never return credential fields.
+function identityResult(value, verbose) {
+    function safe(item) {
+        if (Array.isArray(item))
+            return item.map(safe);
+        if (!item || typeof item !== "object")
+            return item;
+        return Object.fromEntries(Object.entries(item).filter(([key, entry]) => !/secret|password|authorization|access_?token|refresh_?token|api_?key|token_ref/i.test(key)
+            && !(typeof entry === "string" && /^(key|token)$/i.test(key))).map(([key, entry]) => [key, safe(entry)]));
+    }
+    const identity = safe(value);
+    const summary = Object.fromEntries([
+        "env", "status", "org_status", "scopes", "expires_at", "plan", "limits", "credit", "key_budget_cents",
+    ].filter(key => Object.hasOwn(identity, key)).map(key => [key, identity[key]]));
+    return {
+        content: [{ type: "text", text: JSON.stringify(verbose ? identity : {
+                    ...summary, details: "Authorized resource IDs are in structuredContent. Use verbose=true to include identity details in text.",
+                }, null, 2) }],
+        structuredContent: identity,
+    };
+}
 /** Tools that need a configured key. create_sandbox_key + get_started do not. */
 const KEY_REQUIRED = new Set([
     "list_models",
@@ -100,10 +122,10 @@ const LEGACY_TOOLS = [
     {
         name: "whoami",
         description: "Introspect the active key (GET /v1/me): org, environment (test/live), granted scopes, " +
-            "and rate-limit/credit posture. Use it to self-diagnose a 401/403/402.",
+            "and rate-limit/credit posture. Text is concise; authorized IDs remain in structuredContent. Use verbose=true for identity details. Use it to self-diagnose a 401/403/402.",
         inputSchema: {
             type: "object",
-            properties: {},
+            properties: { verbose: { type: "boolean", description: "Include authorized identity details in text. Credentials are always omitted.", default: false } },
             additionalProperties: false,
         },
     },
@@ -464,7 +486,12 @@ async function executeTool(name, args, client, ctx) {
             },
         };
     if (name === "discover_tools") {
-        const words = String(args.query ?? "")
+        const query = typeof args.query === "string" ? args.query.trim() : undefined;
+        const task = typeof args.task === "string" ? args.task.trim() : undefined;
+        if (query === "" || task === "" || (query !== undefined && task !== undefined && query !== task)) {
+            return toolError("Use a non-empty query or task. If both are supplied, they must match after trimming.", "invalid_arguments");
+        }
+        const words = String(query ?? task ?? "")
             .toLowerCase()
             .match(/[a-z0-9]+/g)
             ?.filter((w) => ![
@@ -549,7 +576,7 @@ async function executeTool(name, args, client, ctx) {
                 });
             }
             case "whoami":
-                return text(await client.getJson("/v1/me"));
+                return identityResult(await client.getJson("/v1/me"), args.verbose === true);
             case "list_models":
                 return text(await client.getJson("/v1/models"));
             case "list_voices": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pyai/mcp",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "PyAI MCP: OAuth-connected voice agents, speech, transcription, compliance, call summaries, dubbing and expressive narration for chat apps and coding agents.",
   "type": "module",
   "license": "MIT",