@tenuo/mcp 0.3.4-beta.0 → 0.3.5-beta.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -1
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -47,7 +47,8 @@ await client.callTool({ name: call.name, arguments: call.arguments, _meta: call.
|
|
|
47
47
|
Zod (or any host schema) is **valid**. `allow` is **allowed**, AND'd with the
|
|
48
48
|
warrant in Rust, and zero-trust: every argument must be named. `allow` is
|
|
49
49
|
stripped before `registerTool` so it is not advertised. Pass `nonceStore:
|
|
50
|
-
memoryNonceStore()` to reject
|
|
50
|
+
memoryNonceStore()` to reject a replayed PoP regardless of equivalent Base64
|
|
51
|
+
spelling (opt-in, in-process only).
|
|
51
52
|
PoP v1 is replayable in-window, including approval-gated calls. With
|
|
52
53
|
`nonceStore`, an allowed call also consumes the approvals it carried, so a
|
|
53
54
|
fresh PoP cannot reuse them; pass it on a gated tool if approvals must be
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@tenuo/mcp",
|
|
3
|
-
"version": "0.3.
|
|
3
|
+
"version": "0.3.5-beta.0",
|
|
4
4
|
"description": "Per-call, argument-level authorization for Model Context Protocol (MCP) servers: guard @modelcontextprotocol/server v2 tools with Tenuo warrants (beta).",
|
|
5
5
|
"license": "Apache-2.0",
|
|
6
6
|
"author": "Tenuo Contributors",
|
|
@@ -57,7 +57,7 @@
|
|
|
57
57
|
},
|
|
58
58
|
"peerDependencies": {
|
|
59
59
|
"@modelcontextprotocol/server": "^2.0.0",
|
|
60
|
-
"@tenuo/core": ">=0.3.
|
|
60
|
+
"@tenuo/core": ">=0.3.5-beta.0 <0.3.6"
|
|
61
61
|
},
|
|
62
62
|
"devDependencies": {
|
|
63
63
|
"@modelcontextprotocol/client": "2.0.0",
|