@tensorfeed/mcp-server 2.0.1 → 2.0.2

package/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 All notable changes to the [TensorFeed.ai MCP server](https://github.com/RipperMercs/tensorfeed-mcp). Free tools work without configuration; premium tools require a bearer token via the `TENSORFEED_TOKEN` env var. Buy credits at [tensorfeed.ai/developers/agent-payments](https://tensorfeed.ai/developers/agent-payments).
 
+## 2.0.2 - 2026-07-06
+
+Output hardening. Caller-supplied identifiers that a tool echoes back in its
+own message (a service, model, provider, benchmark, publisher domain, CVE id,
+or search query that did not match) are now stripped of angle brackets and
+length-capped before they are placed in the response text. This is a
+defense-in-depth layer on top of the existing output sanitizer, so a value a
+caller passes in cannot be reflected back as markup. No tool signatures,
+endpoints, or behavior for valid inputs change.
+
 ## 2.0.1 - 2026-07-03
 
 Docs release, no code changes to the stdio server. The README now documents

package/dist/index.js

@@ -5,7 +5,7 @@ import { z } from 'zod';
 import { readFileSync } from 'node:fs';
 import { fileURLToPath } from 'node:url';
 import { dirname, join } from 'node:path';
-import { sanitizeToolResponse, sanitizeForLLM } from './sanitize.js';
+import { sanitizeToolResponse, sanitizeForLLM, sanitizeReflectedValue } from './sanitize.js';
 const API_BASE = 'https://tensorfeed.ai/api';
 // Per-request upstream timeout. fetchJSON is the single HTTP helper behind every
 // MCP tool and the latest_news resource, so a missing timeout would let one
@@ -235,10 +235,10 @@ registerTool('find_tensorfeed_data', 'Discover which TensorFeed endpoint answers
     const rows = flattenCatalog(meta);
     const top = scoreEndpoints(rows, query, limit ?? 3);
     if (top.length === 0) {
-        return { content: [{ type: 'text', text: `No TensorFeed endpoint matched "${query}". Browse the full catalog at https://tensorfeed.ai/api/meta or https://tensorfeed.ai/developers.` }] };
+        return { content: [{ type: 'text', text: `No TensorFeed endpoint matched "${sanitizeReflectedValue(query)}". Browse the full catalog at https://tensorfeed.ai/api/meta or https://tensorfeed.ai/developers.` }] };
     }
     const lines = top.map((r) => `- ${r.path}\n  ${r.description}`).join('\n');
-    return { content: [{ type: 'text', text: `Top TensorFeed endpoints for "${query}":\n${lines}\n\nCall free endpoints directly over HTTP. Paid endpoints (marked with a credit cost) accept x402 payment or a TENSORFEED_TOKEN bearer; see https://tensorfeed.ai/developers/agent-payments.` }] };
+    return { content: [{ type: 'text', text: `Top TensorFeed endpoints for "${sanitizeReflectedValue(query)}":\n${lines}\n\nCall free endpoints directly over HTTP. Paid endpoints (marked with a credit cost) accept x402 payment or a TENSORFEED_TOKEN bearer; see https://tensorfeed.ai/developers/agent-payments.` }] };
 });
 // ── Tool: get_ai_status ─────────────────────────────────────────────
 registerTool('get_ai_status', 'Get the real-time operational status of major AI services (Claude, OpenAI, Gemini, Mistral, Cohere, Replicate, Hugging Face), including per-component breakdowns and an operational/degraded/down rollup per provider. One cross-provider status call instead of checking each vendor\'s status page, useful before an agent routes a request to a model that may be impaired. Free, no auth.', {}, async () => {
@@ -261,7 +261,7 @@ registerTool('is_service_down', 'Check whether one named AI service (e.g. "claud
     const match = data.services.find(s => s.name.toLowerCase().includes(service.toLowerCase()) ||
         s.provider.toLowerCase().includes(service.toLowerCase()));
     if (!match) {
-        return { content: [{ type: 'text', text: `Service "${service}" not found. Available services: ${data.services.map(s => s.name).join(', ')}` }] };
+        return { content: [{ type: 'text', text: `Service "${sanitizeReflectedValue(service)}" not found. Available services: ${data.services.map(s => s.name).join(', ')}` }] };
     }
     const statusEmoji = match.status === 'operational' ? 'OK' : match.status === 'degraded' ? 'DEGRADED' : 'DOWN';
     const components = match.components.length > 0
@@ -563,7 +563,7 @@ registerTool('x402_publisher_verdict', "TensorFeed's signed trust verdict on one
             content: [
                 {
                     type: 'text',
-                    text: `x402 Publisher Verdict for ${data.domain}: ${data.verdict}\n` +
+                    text: `x402 Publisher Verdict for ${sanitizeReflectedValue(data.domain)}: ${data.verdict}\n` +
                         `Momentum: ${data.momentum}. Shared wallet: ${t.wallet_shared ? 'yes (risk flag)' : 'no'}` +
                         (t.last_settled ? `. Last settled ${t.last_settled}` : '') +
                         '\n' +
@@ -580,7 +580,7 @@ registerTool('x402_publisher_verdict', "TensorFeed's signed trust verdict on one
         content: [
             {
                 type: 'text',
-                text: `x402 Publisher Verdict for ${data.domain}: ${data.verdict}\n` +
+                text: `x402 Publisher Verdict for ${sanitizeReflectedValue(data.domain)}: ${data.verdict}\n` +
                     `Claim: ${data.claim}` +
                     (data.captured_at ? `\nIndex captured ${data.captured_at}` : '') +
                     '\n' +
@@ -711,15 +711,16 @@ registerTool('failover_verdict', "Provider A is degraded; TensorFeed's signed ru
     if ((tier ?? 'preview') === 'full') {
         const data = (await fetchJSON(`/premium/failover-verdict?${params}`, { auth: true }));
         const dest = data.failover_to;
+        const fromProvider = sanitizeReflectedValue(data.from.provider);
         const incidentLine = data.from.incident
-            ? `Incident on ${data.from.provider}: ${data.from.incident.title} (action ${data.from.incident.recommended_action})\n`
+            ? `Incident on ${fromProvider}: ${data.from.incident.title} (action ${data.from.incident.recommended_action})\n`
             : '';
         if (!dest) {
             return {
                 content: [
                     {
                         type: 'text',
-                        text: `Failover Verdict from ${data.from.provider}: no operational failover target found.\n` +
+                        text: `Failover Verdict from ${fromProvider}: no operational failover target found.\n` +
                             incidentLine +
                             `Why: ${data.why}\nClaim: ${data.claim}` +
                             verdictBilling(data.billing),
@@ -734,7 +735,7 @@ registerTool('failover_verdict', "Provider A is degraded; TensorFeed's signed ru
             content: [
                 {
                     type: 'text',
-                    text: `Failover Verdict from ${data.from.provider}: fail over to ${dest.model.name} (${dest.model.provider})\n` +
+                    text: `Failover Verdict from ${fromProvider}: fail over to ${dest.model.name} (${dest.model.provider})\n` +
                         `Why: ${dest.why}\n` +
                         `Blended $${dest.pricing.blended}/1M, p95 ${dest.latency.measured_p95_ms ?? 'n/a'}ms, status ${dest.operational.status}\n` +
                         incidentLine +
@@ -748,13 +749,14 @@ registerTool('failover_verdict', "Provider A is degraded; TensorFeed's signed ru
     }
     const data = (await fetchJSON(`/preview/failover-verdict?${params}`));
     const dest = data.failover_to;
+    const fromProvider = sanitizeReflectedValue(data.from.provider);
     const rl = previewRateLine(data.rate_limit);
     if (!dest) {
         return {
             content: [
                 {
                     type: 'text',
-                    text: `Failover Verdict from ${data.from.provider}: no operational failover target found.\n` +
+                    text: `Failover Verdict from ${fromProvider}: no operational failover target found.\n` +
                         `Why: ${data.why}\n${data.claim}\n` +
                         verdictUpsell('failover_verdict', 'the full failover candidate (pricing, measured latency, quality) and the ranked alternatives', rl),
                 },
@@ -765,7 +767,7 @@ registerTool('failover_verdict', "Provider A is degraded; TensorFeed's signed ru
         content: [
             {
                 type: 'text',
-                text: `Failover Verdict from ${data.from.provider}` +
+                text: `Failover Verdict from ${fromProvider}` +
                     (data.from.in_incident ? ' (confirmed in incident)' : '') +
                     `: fail over to ${dest.model.name} (${dest.model.provider})\n` +
                     `Why: ${data.why}\n` +
@@ -797,7 +799,7 @@ registerTool('ssvc_verdict', "TensorFeed's signed SSVC patch-urgency decision fo
             content: [
                 {
                     type: 'text',
-                    text: `SSVC Verdict for ${data.cve}: ${data.decision_primary} (Mission and Well-being assumed medium)\n` +
+                    text: `SSVC Verdict for ${sanitizeReflectedValue(data.cve)}: ${data.decision_primary} (Mission and Well-being assumed medium)\n` +
                         `Envelope: low ${env.low}, medium ${env.medium}, high ${env.high}\n` +
                         `Decision points: exploitation ${dp.exploitation}, automatable ${dp.automatable}, technical impact ${dp.technical_impact}\n` +
                         `${kevLine}\n` +
@@ -815,7 +817,7 @@ registerTool('ssvc_verdict', "TensorFeed's signed SSVC patch-urgency decision fo
         content: [
             {
                 type: 'text',
-                text: `SSVC decision points for ${data.cve}:\n` +
+                text: `SSVC decision points for ${sanitizeReflectedValue(data.cve)}:\n` +
                     `  exploitation: ${dp.exploitation}\n` +
                     `  automatable: ${dp.automatable}\n` +
                     `  technical impact: ${dp.technical_impact}\n` +
@@ -852,7 +854,7 @@ registerTool('pricing_series', 'Daily price points for one AI model over a windo
             content: [
                 {
                     type: 'text',
-                    text: `${data.model} (${data.provider ?? 'unknown'}) ${data.points.length} points\n${summary}\nCredits remaining: ${data.billing?.credits_remaining ?? '?'}`,
+                    text: `${sanitizeReflectedValue(data.model)} (${sanitizeReflectedValue(data.provider ?? 'unknown')}) ${data.points.length} points\n${summary}\nCredits remaining: ${data.billing?.credits_remaining ?? '?'}`,
                 },
             ],
         };
@@ -867,7 +869,7 @@ registerTool('pricing_series', 'Daily price points for one AI model over a windo
         content: [
             {
                 type: 'text',
-                text: `${data.model} (${data.provider ?? 'unknown'}) ${data.points.length} points over ${data.points.length} days\n${summary}\nFor up to 90 days, pass days 8 to 90 (1 credit).`,
+                text: `${sanitizeReflectedValue(data.model)} (${sanitizeReflectedValue(data.provider ?? 'unknown')}) ${data.points.length} points over ${data.points.length} days\n${summary}\nFor up to 90 days, pass days 8 to 90 (1 credit).`,
             },
         ],
     };
@@ -890,7 +892,7 @@ registerTool('benchmark_series', 'Daily benchmark scores for one model+benchmark
             content: [
                 {
                     type: 'text',
-                    text: `${data.model} on ${data.benchmark}: ${data.points.length} points\n${summary}\nCredits remaining: ${data.billing?.credits_remaining ?? '?'}`,
+                    text: `${sanitizeReflectedValue(data.model)} on ${sanitizeReflectedValue(data.benchmark)}: ${data.points.length} points\n${summary}\nCredits remaining: ${data.billing?.credits_remaining ?? '?'}`,
                 },
             ],
         };
@@ -905,7 +907,7 @@ registerTool('benchmark_series', 'Daily benchmark scores for one model+benchmark
         content: [
             {
                 type: 'text',
-                text: `${data.model} on ${data.benchmark}: ${data.points.length} points\n${summary}`,
+                text: `${sanitizeReflectedValue(data.model)} on ${sanitizeReflectedValue(data.benchmark)}: ${data.points.length} points\n${summary}`,
             },
         ],
     };
@@ -926,7 +928,7 @@ registerTool('status_uptime', 'Daily uptime rollup for one provider over a windo
             content: [
                 {
                     type: 'text',
-                    text: `${data.provider} uptime: ${data.uptime_pct ?? 'n/a'}% over ${data.days_with_data} measured days (of ${data.days_total} in range)\n` +
+                    text: `${sanitizeReflectedValue(data.provider)} uptime: ${data.uptime_pct ?? 'n/a'}% over ${data.days_with_data} measured days (of ${data.days_total} in range)\n` +
                         `  operational: ${data.days_operational}, degraded: ${data.days_degraded}, down: ${data.days_down}` +
                         incidents +
                         `\nCredits remaining: ${data.billing?.credits_remaining ?? '?'}`,
@@ -940,7 +942,7 @@ registerTool('status_uptime', 'Daily uptime rollup for one provider over a windo
         content: [
             {
                 type: 'text',
-                text: `${data.provider} over ${data.days_total} days: ${data.uptime_pct ?? '?'}% uptime (${data.days_operational} operational, ${data.days_degraded} degraded, ${data.days_down} down)`,
+                text: `${sanitizeReflectedValue(data.provider)} over ${data.days_total} days: ${data.uptime_pct ?? '?'}% uptime (${data.days_operational} operational, ${data.days_degraded} degraded, ${data.days_down} down)`,
             },
         ],
     };
@@ -1030,7 +1032,7 @@ registerTool('compare_models', 'Pick between models in one call: pricing, benchm
     const data = (await fetchJSON(`/premium/compare/models?ids=${encodeURIComponent(ids)}`, { auth: true }));
     const lines = data.models.map(m => {
         if (!m.matched)
-            return `  ${m.query}: not found`;
+            return `  ${sanitizeReflectedValue(m.query)}: not found`;
         const benches = data.benchmark_keys
             .map(k => `${k}=${m.benchmarks[k] ?? '-'}`)
             .join(', ');
@@ -1209,9 +1211,10 @@ registerTool('create_watch', 'Register a webhook watch. type selects what to wat
             if (secret !== undefined)
                 body.secret = secret;
             const data = (await fetchJSON('/premium/watches', { method: 'POST', body, auth: true }));
+            const safeProvider = sanitizeReflectedValue(provider);
             const desc = op === 'changes'
-                ? `${provider} rank changes`
-                : `${provider} ${(op ?? '').replace('_', ' ')} #${threshold}`;
+                ? `${safeProvider} rank changes`
+                : `${safeProvider} ${(op ?? '').replace('_', ' ')} #${threshold}`;
             return {
                 content: [
                     {

package/dist/sanitize.d.ts

@@ -28,6 +28,21 @@
  * Scrub a single string for return to a host LLM. Idempotent and pure.
  */
 export declare function sanitizeForLLM(input: string): string;
+/**
+ * Neutralize a caller-supplied identifier before echoing it back inside a
+ * human-readable message (for example `Service "X" not found`). Model,
+ * provider, service and benchmark names are the only caller text that lands
+ * in our response strings, and a well-formed one never contains angle
+ * brackets. Stripping `<` and `>` means a value like
+ * `<script>alert(1)</script>` cannot be reflected as live markup into a
+ * downstream web renderer, nor masquerade as a tag in an LLM's context. The
+ * length cap stops a caller padding the message. This runs on echoed caller
+ * input only, never on the structured data we return, so arrow notation
+ * (`->`) and other formatted output elsewhere is untouched. The full
+ * response still passes through sanitizeForLLM afterward for control-char
+ * and role-token scrubbing.
+ */
+export declare function sanitizeReflectedValue(input: unknown): string;
 /**
  * Recursively scrub the `text` field of every text-content item in an
  * MCP tool response. Non-text items (resources, images) pass through

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tensorfeed/mcp-server",
-  "version": "2.0.1",
+  "version": "2.0.2",
   "mcpName": "ai.tensorfeed/mcp-server",
   "description": "MCP server for TensorFeed.ai - AI news, service status, model pricing, signed decision verdicts, time series, model comparison, webhook watches, and a discovery tool for the full TensorFeed data catalog, for AI agents",
   "main": "dist/index.js",

package/server.json

@@ -3,7 +3,7 @@
   "name": "ai.tensorfeed/mcp-server",
   "title": "TensorFeed",
   "description": "AI news, model pricing, service status, and machine-payable premium tools. AFTA-certified.",
-  "version": "2.0.1",
+  "version": "2.0.2",
   "websiteUrl": "https://tensorfeed.ai/developers/agent-payments",
   "repository": {
     "url": "https://github.com/RipperMercs/tensorfeed-mcp",
@@ -20,7 +20,7 @@
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@tensorfeed/mcp-server",
-      "version": "2.0.1",
+      "version": "2.0.2",
       "runtimeHint": "npx",
       "transport": {
         "type": "stdio"