@socketsecurity/mcp 0.0.20 → 0.2.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +62 -1
- package/README.md +272 -120
- package/dist/index.cjs +54907 -41297
- package/{hooks → dist}/socket-gate/README.md +13 -13
- package/dist/socket-gate/socket-gate.cjs +5391 -0
- package/package.json +232 -47
- package/hooks/socket-gate/index.mts +0 -296
- package/hooks/socket-gate/socket-gate.cjs +0 -1047
package/CHANGELOG.md
CHANGED
|
@@ -5,7 +5,68 @@ All notable changes to `@socketsecurity/mcp` will be documented in this file.
|
|
|
5
5
|
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
|
|
6
6
|
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
|
7
7
|
|
|
8
|
-
## [
|
|
8
|
+
## [0.2.1](https://github.com/SocketDev/socket-mcp/releases/tag/v0.2.1) - 2026-09-17
|
|
9
|
+
|
|
10
|
+
### Fixed
|
|
11
|
+
|
|
12
|
+
- The README shows one Socket logo and uses text links for VS Code and Cursor installation.
|
|
13
|
+
|
|
14
|
+
## [0.2.0](https://github.com/SocketDev/socket-mcp/releases/tag/v0.2.0) - 2026-09-15
|
|
15
|
+
|
|
16
|
+
### Internal
|
|
17
|
+
|
|
18
|
+
- **`ci`** — normalize workflow labels
|
|
19
|
+
|
|
20
|
+
## [0.1.0](https://github.com/SocketDev/socket-mcp/releases/tag/v0.1.0) - 2026-09-14
|
|
21
|
+
|
|
22
|
+
### Added
|
|
23
|
+
|
|
24
|
+
- **`mcp`** — structured audit logging for MCP tool executions
|
|
25
|
+
- **`mcp`** — serve the stateless protocol on the v2 sdk
|
|
26
|
+
|
|
27
|
+
### Changed
|
|
28
|
+
|
|
29
|
+
- The copyable socket-gate hook directory in the published package moved from
|
|
30
|
+
`hooks/socket-gate` to `dist/socket-gate`.
|
|
31
|
+
|
|
32
|
+
### Fixed
|
|
33
|
+
|
|
34
|
+
- **`telemetry`** — forward MCP client identity to Socket API
|
|
35
|
+
- **`build`** — omit dependency documentation from bundles
|
|
36
|
+
- **`tooling`** — keep debug client callbacks void
|
|
37
|
+
- **`tooling`** — classify the product entrypoint
|
|
38
|
+
- **`build`** — resolve current fleet entrypoint helpers
|
|
39
|
+
- **`oauth`** — reject tokens at expiration and verify reauthorization
|
|
40
|
+
- match Socket coverage badge styling
|
|
41
|
+
- **`server`** — refine artifact lookup and request checks
|
|
42
|
+
- **`fuzz`** — match .mts targets and stay quiet on an empty run
|
|
43
|
+
- **`workspace`** — drop pnpm settings current pnpm rejects
|
|
44
|
+
- **`docs`** — remove trailing space inside a code span
|
|
45
|
+
- **`origin`** — trust the hosted deployment's Host over a strict Origin allowlist (#214)
|
|
46
|
+
- **`mcp`** — use socket-lib isPlainObject in maskArgs
|
|
47
|
+
- **`readme`** — serve the four images from absolute raw URLs
|
|
48
|
+
- **`catalog`** — sync the sdk -stable alias to its base version
|
|
49
|
+
- **`catalog`** — sync the sdk -stable alias to the held base version
|
|
50
|
+
- **`soak`** — drop the unpublishable bare stuie exclude
|
|
51
|
+
- **`scripts`** — drop npm-run-all2 and the dead llms-txt script
|
|
52
|
+
- **`oauth`** — bind tokens to this resource server and harden discovery
|
|
53
|
+
- **`build`** — stop the clean step racing concurrent cache writers
|
|
54
|
+
|
|
55
|
+
### Internal
|
|
56
|
+
|
|
57
|
+
- **`ci`** — consolidate pins and collect offline server tests
|
|
58
|
+
- **`ci`** — read app client identifiers from secrets
|
|
59
|
+
- **`ci`** — use public app client identifiers
|
|
60
|
+
- **`ci`** — read payload client ids from secrets
|
|
61
|
+
- **`config`** — reconcile repository-owned files
|
|
62
|
+
- **`ci`** — use inline checkout bootstrap
|
|
63
|
+
- **`ci`** — align lockfile with hydrated catalogs
|
|
64
|
+
- **`bootstrap`** — await the newest fleet reference
|
|
65
|
+
- **`deps`** — restore the missing yaml catalog entry
|
|
66
|
+
- **`deps`** — drop the orphaned pnpm package-manager pin
|
|
67
|
+
- **`deps`** — restore the payload importer the lockfile dropped
|
|
68
|
+
- **`ci`** — keep the zizmor config tracked, it is not fleet payload
|
|
69
|
+
- **`lint`** — escape raw NULs and hoist bypass markers
|
|
9
70
|
|
|
10
71
|
## [0.0.20]
|
|
11
72
|
|