@sendinel/mcp-server 1.0.182 → 1.0.183

package/build/lib/limited-grant.d.ts

@@ -0,0 +1,2 @@
+/** #4508: operations whose implicit scope cannot be reduced to a project set. */
+export declare const LIMITED_GRANT_DENIED_TOOLS: Set<string>;

package/build/lib/limited-grant.js

@@ -0,0 +1,10 @@
+/** #4508: operations whose implicit scope cannot be reduced to a project set. */
+export const LIMITED_GRANT_DENIED_TOOLS = new Set([
+    'get_portfolio_stats', 'get_portfolio_analytics', 'run_portfolio_analysis', 'review_campaign_portfolio',
+    'create_project',
+    'list_team_members', 'invite_team_member', 'remove_team_member', 'set_team_member_role',
+    'set_member_project_access', 'list_invitations', 'resend_invitation', 'revoke_invitation',
+    'get_plan_usage', 'get_model_registry', 'get_white_label_settings', 'set_white_label_settings',
+    'add_white_label_domain', 'list_my_support_tickets', 'post_ticket_reply', 'get_outbound_digest',
+    'list_social_connections',
+]);

package/build/tools/gateway.js

@@ -2,6 +2,8 @@ import { Client } from '@modelcontextprotocol/sdk/client/index.js';
 import { InMemoryTransport } from '@modelcontextprotocol/sdk/inMemory.js';
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { z } from 'zod';
+import { requestContext } from '../db.js';
+import { LIMITED_GRANT_DENIED_TOOLS } from '../lib/limited-grant.js';
 import { registerHowTo } from './how-to.js';
 import { getRegisteredToolGroups, registerAllTools } from '../server.js';
 import { rankTools, scoreTool, TOOL_ALIASES, tokenize } from './tool-search.js';
@@ -80,7 +82,14 @@ function unknownArgsMessage(name, inputSchema, unknown) {
 export function registerGatewayTools(server, options) {
     registerHowTo(server, options);
     let catalogPromise = null;
-    const getCatalog = () => (catalogPromise ??= buildCatalog(options));
+    const getCatalog = async () => {
+        const catalog = await (catalogPromise ??= buildCatalog(options));
+        // Filter on each request, not while caching: grants must never share catalog visibility.
+        if (requestContext()?.allowedProjectIds == null)
+            return catalog;
+        const entries = catalog.entries.filter(entry => !LIMITED_GRANT_DENIED_TOOLS.has(entry.name));
+        return { ...catalog, entries, byName: new Map(entries.map(entry => [entry.name, entry])) };
+    };
     server.registerTool('search_tools', {
         title: 'Search Tools',
         description: 'Search the permitted Sendinel MCP tool catalog by keyword and/or group. Returns name, group, and description. Optional limit/offset page ranked search results or explicit browsing. Call describe_tool for the full input schema before invoke_tool.',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendinel/mcp-server",
-  "version": "1.0.182",
+  "version": "1.0.183",
   "description": "AI-controlled email operations control plane for campaigns, contacts, segments, analytics, and multi-provider sending via MCP.",
   "mcpName": "ai.sendinel/mcp-server",
   "type": "module",