@tinycloud/mcp 0.8.3-beta.2 → 0.8.3-beta.21
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +52 -44
- package/dist/cli.cjs +4 -4
- package/dist/cli.cjs.map +1 -1
- package/dist/cli.js +4 -4
- package/dist/cli.js.map +1 -1
- package/dist/http-cli.cjs +940 -26
- package/dist/http-cli.cjs.map +1 -1
- package/dist/http-cli.js +939 -22
- package/dist/http-cli.js.map +1 -1
- package/dist/http.cjs +927 -25
- package/dist/http.cjs.map +1 -1
- package/dist/http.d.cts +24 -0
- package/dist/http.d.ts +24 -0
- package/dist/http.js +926 -21
- package/dist/http.js.map +1 -1
- package/dist/index.cjs +927 -25
- package/dist/index.cjs.map +1 -1
- package/dist/index.js +926 -21
- package/dist/index.js.map +1 -1
- package/dist/server.cjs +4 -4
- package/dist/server.cjs.map +1 -1
- package/dist/server.js +4 -4
- package/dist/server.js.map +1 -1
- package/dist/tools.cjs +1 -1
- package/dist/tools.cjs.map +1 -1
- package/dist/tools.d.cts +3 -1
- package/dist/tools.d.ts +3 -1
- package/dist/tools.js +1 -1
- package/dist/tools.js.map +1 -1
- package/package.json +3 -3
- package/skills/tinycloud-delegated-secrets/SKILL.md +18 -4
package/dist/http.d.cts
CHANGED
|
@@ -1,5 +1,21 @@
|
|
|
1
1
|
import { OAuthMetadata } from '@modelcontextprotocol/server';
|
|
2
2
|
|
|
3
|
+
interface TokenStatusConfig {
|
|
4
|
+
/** OpenKey's resource-server introspection endpoint (`TC_MCP_INTROSPECTION_URL`). */
|
|
5
|
+
readonly endpoint: string;
|
|
6
|
+
/** The resource URL (JWT audience) this checker serves; an active answer must name it. */
|
|
7
|
+
readonly resourceUrl: string;
|
|
8
|
+
readonly clientId: string;
|
|
9
|
+
readonly clientSecret: string;
|
|
10
|
+
/** How the confidential client authenticates: `client_secret_basic` or `client_secret_post`. */
|
|
11
|
+
readonly authMethod: "basic" | "post";
|
|
12
|
+
readonly timeoutMs?: number;
|
|
13
|
+
/** Test seams. */
|
|
14
|
+
readonly fetch?: typeof fetch;
|
|
15
|
+
readonly now?: () => number;
|
|
16
|
+
readonly log?: (message: string) => void;
|
|
17
|
+
}
|
|
18
|
+
|
|
3
19
|
interface RemoteStoreConfig {
|
|
4
20
|
readonly stateDir: string;
|
|
5
21
|
readonly stateSecret: string;
|
|
@@ -10,11 +26,19 @@ interface RemoteStoreConfig {
|
|
|
10
26
|
readonly openkeyHost: string;
|
|
11
27
|
readonly approvalTtlSeconds: number;
|
|
12
28
|
readonly delegationExpiry: string;
|
|
29
|
+
/** Shared secret used only by the Exo native client, never logged. */
|
|
30
|
+
readonly nativeServiceCredential?: string;
|
|
13
31
|
}
|
|
14
32
|
|
|
15
33
|
interface HostedMcpConfig extends RemoteStoreConfig {
|
|
16
34
|
readonly oauthMetadata: OAuthMetadata;
|
|
17
35
|
readonly allowedOrigins?: readonly string[];
|
|
36
|
+
/**
|
|
37
|
+
* OpenKey token introspection client (`TC_MCP_INTROSPECTION_URL` and client
|
|
38
|
+
* credentials). The hosted server always sets this; without it only the
|
|
39
|
+
* signed token claims are checked.
|
|
40
|
+
*/
|
|
41
|
+
readonly introspection?: Omit<TokenStatusConfig, "resourceUrl">;
|
|
18
42
|
}
|
|
19
43
|
interface HostedMcpApp {
|
|
20
44
|
readonly fetch: (request: Request) => Promise<Response>;
|
package/dist/http.d.ts
CHANGED
|
@@ -1,5 +1,21 @@
|
|
|
1
1
|
import { OAuthMetadata } from '@modelcontextprotocol/server';
|
|
2
2
|
|
|
3
|
+
interface TokenStatusConfig {
|
|
4
|
+
/** OpenKey's resource-server introspection endpoint (`TC_MCP_INTROSPECTION_URL`). */
|
|
5
|
+
readonly endpoint: string;
|
|
6
|
+
/** The resource URL (JWT audience) this checker serves; an active answer must name it. */
|
|
7
|
+
readonly resourceUrl: string;
|
|
8
|
+
readonly clientId: string;
|
|
9
|
+
readonly clientSecret: string;
|
|
10
|
+
/** How the confidential client authenticates: `client_secret_basic` or `client_secret_post`. */
|
|
11
|
+
readonly authMethod: "basic" | "post";
|
|
12
|
+
readonly timeoutMs?: number;
|
|
13
|
+
/** Test seams. */
|
|
14
|
+
readonly fetch?: typeof fetch;
|
|
15
|
+
readonly now?: () => number;
|
|
16
|
+
readonly log?: (message: string) => void;
|
|
17
|
+
}
|
|
18
|
+
|
|
3
19
|
interface RemoteStoreConfig {
|
|
4
20
|
readonly stateDir: string;
|
|
5
21
|
readonly stateSecret: string;
|
|
@@ -10,11 +26,19 @@ interface RemoteStoreConfig {
|
|
|
10
26
|
readonly openkeyHost: string;
|
|
11
27
|
readonly approvalTtlSeconds: number;
|
|
12
28
|
readonly delegationExpiry: string;
|
|
29
|
+
/** Shared secret used only by the Exo native client, never logged. */
|
|
30
|
+
readonly nativeServiceCredential?: string;
|
|
13
31
|
}
|
|
14
32
|
|
|
15
33
|
interface HostedMcpConfig extends RemoteStoreConfig {
|
|
16
34
|
readonly oauthMetadata: OAuthMetadata;
|
|
17
35
|
readonly allowedOrigins?: readonly string[];
|
|
36
|
+
/**
|
|
37
|
+
* OpenKey token introspection client (`TC_MCP_INTROSPECTION_URL` and client
|
|
38
|
+
* credentials). The hosted server always sets this; without it only the
|
|
39
|
+
* signed token claims are checked.
|
|
40
|
+
*/
|
|
41
|
+
readonly introspection?: Omit<TokenStatusConfig, "resourceUrl">;
|
|
18
42
|
}
|
|
19
43
|
interface HostedMcpApp {
|
|
20
44
|
readonly fetch: (request: Request) => Promise<Response>;
|