@recursiv/cli 0.1.11 → 0.1.12

package/dist/bin/recursiv.js

@@ -572,7 +572,9 @@ async function installCodex(apiKey) {
     'args = ["-y", "@recursiv/mcp"]',
     "",
     "[mcp_servers.recursiv.env]",
-    `RECURSIV_API_KEY = "${apiKey}"`
+    `RECURSIV_API_KEY = "${apiKey}"`,
+    // Opt into the full tool surface — see mcpServerEntry() for context.
+    `RECURSIV_API_KEY_SCOPES = "*"`
   ].join("\n");
   const final = existing.trimEnd() + "\n" + tomlBlock + "\n";
   await writeFile6(configPath2, final, "utf-8");
@@ -593,7 +595,9 @@ async function installOpenCode(apiKey, global) {
     type: "local",
     command: ["npx", "-y", "@recursiv/mcp"],
     enabled: true,
+    // Opt into the full tool surface — see mcpServerEntry() for context.
     environment: {
+      RECURSIV_API_KEY_SCOPES: "*",
       RECURSIV_API_KEY: apiKey
     }
   };
@@ -676,7 +680,14 @@ function mcpServerEntry(apiKey) {
     command: "npx",
     args: ["-y", "@recursiv/mcp"],
     env: {
-      RECURSIV_API_KEY: apiKey
+      RECURSIV_API_KEY: apiKey,
+      // The MCP server defaults to read-only tool registration when
+      // RECURSIV_API_KEY_SCOPES is absent (a safety default for ambient
+      // keys with unknown scope). The CLI mints a key with the full
+      // scope set on purpose — explicitly opt in so the user gets the
+      // tools they expect (create_project, provision_app, deploy_project,
+      // etc.). The wildcard says "all scopes the key actually has."
+      RECURSIV_API_KEY_SCOPES: "*"
     }
   };
 }