@scratchrun/mcp-server 0.1.2 → 0.1.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +6 -4
  2. package/package.json +1 -1
package/README.md CHANGED
@@ -57,10 +57,12 @@ Output files are returned as base64. Image files (PNG, JPG, SVG) are returned as
57
57
  - Hardware-virtualized MicroVM per execution (own kernel, not a shared-kernel container)
58
58
  - `TerminateMicroVM` called unconditionally after every run — VM destroyed, never reused
59
59
  - RFC 1918 private ranges are blocked. Link-local `169.254.x.x` is **not**: an
60
- instance-metadata service is reachable. It exposes no credentials (no IAM
61
- role is attached), only placement data and a per-VM key.
62
- - No in-guest hardening: code runs as root on a writable filesystem, and `/tmp`
63
- is ordinary disk inside the VM. All of it is destroyed with the VM.
60
+ instance-metadata service is reachable. Measured 2026-11-04: it returned 404
61
+ on every role and credential path, because no IAM role is attached — and a
62
+ daily CI check fails if one ever is.
63
+ - Code runs as root on a writable filesystem, with the default container
64
+ capability set (no network administration); `/tmp` is ordinary disk inside
65
+ the VM. All of it is destroyed with the VM.
64
66
 
65
67
  ## Latency
66
68
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@scratchrun/mcp-server",
3
- "version": "0.1.2",
3
+ "version": "0.1.3",
4
4
  "mcpName": "dev.scratchrun/mcp",
5
5
  "description": "MCP server for ScratchRun — ephemeral MicroVM code execution for AI agents",
6
6
  "type": "module",