@smithery/api 0.24.0 → 0.26.0

package/src/resources/tokens.ts

@@ -12,10 +12,7 @@ export class Tokens extends APIResource {
    * @example
    * ```ts
    * const createTokenResponse = await client.tokens.create({
-   *   permissions: {
-   *     connections: { can: ['read', 'write'] },
-   *     'connections.rpc': { can: ['write'] },
-   *   },
+   *   allow: {},
    *   ttlSeconds: 3600,
    * });
    * ```
@@ -25,50 +22,85 @@ export class Tokens extends APIResource {
   }
 }
 
-export interface CreateTokenRequest {
+/**
+ * Permission action. 'read' allows reading/listing. 'write' allows
+ * create/modify/delete.
+ */
+export type Action = 'read' | 'write';
+
+/**
+ * Permission grants with per-resource scoping. Each resource defines its own
+ * namespaces and constraints.
+ */
+export interface Allow {
   /**
-   * Permissions to grant. Format: { [subject]: { can: [actions] } }
+   * Scope for managing MCP connections.
    */
-  permissions: { [key: string]: CreateTokenRequest.Permissions };
+  connections?: ConnectionScope;
 
   /**
-   * Token TTL in seconds. Required. Max 86400 (24 hours).
+   * Scope for deployment operations.
    */
-  ttlSeconds: number;
+  deployments?: ResourceScope;
 
   /**
-   * Optional constraints to limit token access.
+   * Scope for namespace management.
    */
-  constraints?: CreateTokenRequest.Constraints;
+  namespaces?: ResourceScope;
 
   /**
-   * Profile to scope the token to. If not provided, uses the default profile.
+   * Scope for making RPC calls on connections.
    */
-  profileSlug?: string;
+  rpc?: RpcScope;
+
+  /**
+   * Scope for server metadata and configuration.
+   */
+  servers?: ResourceScope;
+
+  /**
+   * Scope for token creation.
+   */
+  tokens?: ResourceScope;
 }
 
-export namespace CreateTokenRequest {
-  export interface Permissions {
-    /**
-     * Actions granted on this subject.
-     */
-    can: Array<'read' | 'write'>;
-  }
+/**
+ * Scope for connection operations.
+ */
+export interface ConnectionScope {
+  /**
+   * Actions allowed on connections.
+   */
+  actions: Array<Action>;
 
   /**
-   * Optional constraints to limit token access.
+   * Namespaces this scope applies to. Use '\*' for all namespaces.
    */
-  export interface Constraints {
-    /**
-     * Limit access to specific namespace IDs.
-     */
-    namespaceIds?: Array<string>;
+  namespaces: Array<string>;
 
-    /**
-     * Limit access to specific server qualified names.
-     */
-    serverQualifiedNames?: Array<string>;
-  }
+  /**
+   * Filter access to connections with matching metadata. All keys must match (AND
+   * semantics).
+   */
+  metadata?: { [key: string]: string };
+}
+
+export interface CreateTokenRequest {
+  /**
+   * Per-resource permission grants. Format: { [resource]: { actions: [...],
+   * namespaces: [...], metadata?: {...} } }
+   */
+  allow: Allow;
+
+  /**
+   * Token TTL in seconds. Required. Max 86400 (24 hours).
+   */
+  ttlSeconds: number;
+
+  /**
+   * Profile to scope the token to. If not provided, uses the default profile.
+   */
+  profileSlug?: string;
 }
 
 export interface CreateTokenResponse {
@@ -83,56 +115,69 @@ export interface CreateTokenResponse {
   expiresAt: string;
 }
 
-export interface TokenCreateParams {
+/**
+ * Scope for resource operations.
+ */
+export interface ResourceScope {
   /**
-   * Permissions to grant. Format: { [subject]: { can: [actions] } }
+   * Actions allowed on this resource.
    */
-  permissions: { [key: string]: TokenCreateParams.Permissions };
+  actions: Array<Action>;
 
   /**
-   * Token TTL in seconds. Required. Max 86400 (24 hours).
+   * Namespaces this scope applies to. Use '\*' for all namespaces.
    */
-  ttlSeconds: number;
+  namespaces: Array<string>;
+}
 
+/**
+ * Scope for RPC operations on connections.
+ */
+export interface RpcScope {
   /**
-   * Optional constraints to limit token access.
+   * Actions allowed for RPC calls.
    */
-  constraints?: TokenCreateParams.Constraints;
+  actions: Array<Action>;
 
   /**
-   * Profile to scope the token to. If not provided, uses the default profile.
+   * Namespaces this scope applies to. Use '\*' for all namespaces.
    */
-  profileSlug?: string;
+  namespaces: Array<string>;
+
+  /**
+   * Filter access to connections with matching metadata. All keys must match (AND
+   * semantics).
+   */
+  metadata?: { [key: string]: string };
 }
 
-export namespace TokenCreateParams {
-  export interface Permissions {
-    /**
-     * Actions granted on this subject.
-     */
-    can: Array<'read' | 'write'>;
-  }
+export interface TokenCreateParams {
+  /**
+   * Per-resource permission grants. Format: { [resource]: { actions: [...],
+   * namespaces: [...], metadata?: {...} } }
+   */
+  allow: Allow;
 
   /**
-   * Optional constraints to limit token access.
+   * Token TTL in seconds. Required. Max 86400 (24 hours).
    */
-  export interface Constraints {
-    /**
-     * Limit access to specific namespace IDs.
-     */
-    namespaceIds?: Array<string>;
+  ttlSeconds: number;
 
-    /**
-     * Limit access to specific server qualified names.
-     */
-    serverQualifiedNames?: Array<string>;
-  }
+  /**
+   * Profile to scope the token to. If not provided, uses the default profile.
+   */
+  profileSlug?: string;
 }
 
 export declare namespace Tokens {
   export {
+    type Action as Action,
+    type Allow as Allow,
+    type ConnectionScope as ConnectionScope,
     type CreateTokenRequest as CreateTokenRequest,
     type CreateTokenResponse as CreateTokenResponse,
+    type ResourceScope as ResourceScope,
+    type RpcScope as RpcScope,
     type TokenCreateParams as TokenCreateParams,
   };
 }

package/src/version.ts

@@ -1 +1 @@
-export const VERSION = '0.24.0'; // x-release-please-version
+export const VERSION = '0.26.0'; // x-release-please-version

package/version.d.mts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.24.0";
+export declare const VERSION = "0.26.0";
 //# sourceMappingURL=version.d.mts.map

package/version.d.ts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.24.0";
+export declare const VERSION = "0.26.0";
 //# sourceMappingURL=version.d.ts.map

package/version.js

@@ -1,5 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VERSION = void 0;
-exports.VERSION = '0.24.0'; // x-release-please-version
+exports.VERSION = '0.26.0'; // x-release-please-version
 //# sourceMappingURL=version.js.map

package/version.mjs

@@ -1,2 +1,2 @@
-export const VERSION = '0.24.0'; // x-release-please-version
+export const VERSION = '0.26.0'; // x-release-please-version
 //# sourceMappingURL=version.mjs.map