@shield-agent/kya 0.1.17 → 0.1.18

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (11) hide show
  1. package/.mcp.json +1 -1
  2. package/README.md +3 -3
  3. package/claude/claude_desktop_config.example.json +1 -1
  4. package/gemini/settings.example.json +1 -1
  5. package/grok/README.md +2 -2
  6. package/manifest.json +1 -1
  7. package/mcp.json +1 -1
  8. package/openai/codex.config.example.toml +3 -2
  9. package/openai/responses-mcp.example.json +2 -1
  10. package/package.json +1 -1
  11. package/server.json +2 -2
package/.mcp.json CHANGED
@@ -2,7 +2,7 @@
2
2
  "mcpServers": {
3
3
  "shield-kya": {
4
4
  "command": "npx",
5
- "args": ["--no-install", "@shield-agent/kya@0.1.17", "serve-mcp", "--stdio"],
5
+ "args": ["--no-install", "@shield-agent/kya@0.1.18", "serve-mcp", "--stdio"],
6
6
  "env": {
7
7
  "KYA_BASE_URL": "https://shield-agent.com",
8
8
  "KYA_API_KEY": "${KYA_API_KEY}",
package/README.md CHANGED
@@ -79,7 +79,7 @@ MCP Registry entry: `server.json` plus package `mcpName` `io.github.The-Pixel-Bo
79
79
  "mcpServers": {
80
80
  "shield-kya": {
81
81
  "command": "npx",
82
- "args": ["--no-install", "@shield-agent/kya@0.1.17", "serve-mcp", "--stdio"],
82
+ "args": ["--no-install", "@shield-agent/kya@0.1.18", "serve-mcp", "--stdio"],
83
83
  "env": {
84
84
  "KYA_BASE_URL": "http://127.0.0.1:8090",
85
85
  "KYA_API_KEY": "${KYA_API_KEY}",
@@ -106,7 +106,7 @@ npx @shield-agent/kya reject --id <approval-id>
106
106
 
107
107
  ```bash
108
108
  # Prefer a preinstalled package (no registry auto-install):
109
- npx --no-install @shield-agent/kya@0.1.17 serve-mcp --stdio
109
+ npx --no-install @shield-agent/kya@0.1.18 serve-mcp --stdio
110
110
  # Or after npm i -g / local install:
111
111
  kya serve-mcp --stdio
112
112
  ```
@@ -117,7 +117,7 @@ Copy `claude/claude_desktop_config.example.json` into Claude Desktop MCP setting
117
117
 
118
118
  ## OpenAI (Codex / Responses)
119
119
 
120
- **Codex CLI / IDE:** copy `openai/codex.config.example.toml` into `~/.codex/config.toml`. Local stdio uses `npx --no-install @shield-agent/kya@0.1.17 serve-mcp --stdio`. Hosted Codex uses `url = "https://shield-agent.com/mcp"` with `bearer_token_env_var = "KYA_API_KEY"`.
120
+ **Codex CLI / IDE:** copy `openai/codex.config.example.toml` into `~/.codex/config.toml`. Local stdio uses `npx --no-install @shield-agent/kya@0.1.18 serve-mcp --stdio`. Hosted Codex uses `url = "https://shield-agent.com/mcp"` with `bearer_token_env_var = "KYA_API_KEY"`.
121
121
 
122
122
  **Responses API:** see `openai/responses-mcp.example.json` (`server_url` + `Authorization: Bearer <KYA_API_KEY>`).
123
123
 
package/claude/claude_desktop_config.example.json CHANGED
@@ -2,7 +2,7 @@
2
2
  "mcpServers": {
3
3
  "shield-kya": {
4
4
  "command": "npx",
5
- "args": ["--no-install", "@shield-agent/kya@0.1.17", "serve-mcp", "--stdio"],
5
+ "args": ["--no-install", "@shield-agent/kya@0.1.18", "serve-mcp", "--stdio"],
6
6
  "env": {
7
7
  "KYA_BASE_URL": "https://shield-agent.com",
8
8
  "KYA_API_KEY": "${KYA_API_KEY}",
package/gemini/settings.example.json CHANGED
@@ -2,7 +2,7 @@
2
2
  "mcpServers": {
3
3
  "shield-kya": {
4
4
  "command": "npx",
5
- "args": ["--no-install", "@shield-agent/kya@0.1.17", "serve-mcp", "--stdio"],
5
+ "args": ["--no-install", "@shield-agent/kya@0.1.18", "serve-mcp", "--stdio"],
6
6
  "env": {
7
7
  "KYA_BASE_URL": "https://shield-agent.com",
8
8
  "KYA_API_KEY": "${KYA_API_KEY}",
package/grok/README.md CHANGED
@@ -9,7 +9,7 @@ Same three MCP tools as Claude and Codex: `kya.policy_evaluate`, `kya.session_in
9
9
  3. Server URL: `https://shield-agent.com/mcp`.
10
10
  4. Auth: machine API key as `Authorization: Bearer <KYA_API_KEY>` when the UI offers a request header / API key field. If the UI only offers OAuth or None, stop and use the xAI SDK or Codex/Gemini CLI instead. Do not turn auth off.
11
11
 
12
- Grok rejects `localhost` and private IPs. A tunnel is only for your own debugging and still requires the Bearer key. We do not ship or support unauthenticated public tunnels.
12
+ Grok rejects `localhost` and private IPs. Do not expose OSS HTTP MCP through a public URL. Use `https://shield-agent.com/mcp` with a Bearer machine key.
13
13
 
14
14
  ## Hosted (xAI SDK)
15
15
 
@@ -40,7 +40,7 @@ chat = client.chat.create(
40
40
  There is no grok.com stdio path. For a local agent host use the same stdio launch as Claude:
41
41
 
42
42
  ```bash
43
- npx --no-install @shield-agent/kya@0.1.17 serve-mcp --stdio
43
+ npx --no-install @shield-agent/kya@0.1.18 serve-mcp --stdio
44
44
  ```
45
45
 
46
46
  Env: `KYA_BASE_URL`, `KYA_API_KEY`, `KYA_HOST`. Codex and Gemini example configs in this package show the full snippets.
package/manifest.json CHANGED
@@ -2,7 +2,7 @@
2
2
  "manifest_version": "0.3",
3
3
  "name": "shield-kya",
4
4
  "display_name": "Shield KYA",
5
- "version": "0.1.17",
5
+ "version": "0.1.18",
6
6
  "description": "Know Your Agent MCP gate: ALLOW / DENY / REQUIRE_APPROVE. Sole PEP is Shield.",
7
7
  "long_description": "Local Claude Desktop extension that runs the packaged `dist/cli.js serve-mcp --stdio` against your Shield control plane (local or https://shield-agent.com). Tools evaluate policy, ingest session risk, and open Hold tickets. They never execute irreversible side effects.",
8
8
  "author": {
package/mcp.json CHANGED
@@ -3,7 +3,7 @@
3
3
  "shield-kya": {
4
4
  "description": "Know Your Agent local MCP gate: wrap-before-write, named-agent registry, Hold/Clear.",
5
5
  "command": "npx",
6
- "args": ["--no-install", "@shield-agent/kya@0.1.17", "serve-mcp", "--stdio"],
6
+ "args": ["--no-install", "@shield-agent/kya@0.1.18", "serve-mcp", "--stdio"],
7
7
  "env": {
8
8
  "KYA_BASE_URL": "${KYA_BASE_URL}",
9
9
  "KYA_API_KEY": "${KYA_API_KEY}",
package/openai/codex.config.example.toml CHANGED
@@ -1,5 +1,6 @@
1
1
  # Codex CLI / IDE — Shield KYA MCP
2
- # Copy into ~/.codex/config.toml (or project .codex/config.toml in a trusted project).
2
+ # Copy into ~/.codex/config.toml. Do not drop a live key into a project's
3
+ # .codex/config.toml (that file is easy to commit).
3
4
  # Docs: https://developers.openai.com/codex/mcp
4
5
  #
5
6
  # ChatGPT Apps (chatgpt.com Developer Mode) are deferred: that path wants OAuth.
@@ -10,7 +11,7 @@
10
11
  # --- Local stdio (OSS) ---
11
12
  [mcp_servers.shield-kya]
12
13
  command = "npx"
13
- args = ["--no-install", "@shield-agent/kya@0.1.17", "serve-mcp", "--stdio"]
14
+ args = ["--no-install", "@shield-agent/kya@0.1.18", "serve-mcp", "--stdio"]
14
15
  startup_timeout_sec = 20
15
16
  env_vars = ["KYA_BASE_URL", "KYA_API_KEY", "KYA_HOST", "KYA_AGENT_ID"]
16
17
 
package/openai/responses-mcp.example.json CHANGED
@@ -6,7 +6,8 @@
6
6
  "type": "mcp",
7
7
  "server_label": "shield-kya",
8
8
  "server_url": "https://shield-agent.com/mcp",
9
- "authorization": "Bearer ${KYA_API_KEY}"
9
+ "authorization": "Bearer ${KYA_API_KEY}",
10
+ "allowed_tools": ["kya.policy_evaluate"]
10
11
  }
11
12
  ],
12
13
  "input": "Evaluate whether tool org.sample.data.write should proceed. Use the shield-kya policy tool. Do not invent an approval."
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@shield-agent/kya",
3
- "version": "0.1.17",
3
+ "version": "0.1.18",
4
4
  "description": "Know Your Agent light CLI + local MCP gate (provider-agnostic, zero vertical packs required).",
5
5
  "license": "MIT",
6
6
  "type": "module",
package/server.json CHANGED
@@ -7,12 +7,12 @@
7
7
  "url": "https://github.com/The-Pixel-Boys/shield-kya",
8
8
  "source": "github"
9
9
  },
10
- "version": "0.1.17",
10
+ "version": "0.1.18",
11
11
  "packages": [
12
12
  {
13
13
  "registryType": "npm",
14
14
  "identifier": "@shield-agent/kya",
15
- "version": "0.1.17",
15
+ "version": "0.1.18",
16
16
  "transport": {
17
17
  "type": "stdio"
18
18
  },