@vardum/mcp 0.4.2 → 0.4.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +6 -5
- package/dist/index.js +1 -1
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -4,12 +4,13 @@ MCP server for [Vardum](https://vardum.com): lets an AI agent manage assets and
|
|
|
4
4
|
Vards using a key scoped to one workspace. Workspace creation, membership,
|
|
5
5
|
API-key management and domains are managed in the web app with a signed-in session.
|
|
6
6
|
|
|
7
|
-
This README describes [MCP **0.4.
|
|
7
|
+
This README describes [MCP **0.4.3**](https://www.npmjs.com/package/@vardum/mcp/v/0.4.3),
|
|
8
8
|
including revision-guarded Vard editing and recipe help for backgrounds, safe
|
|
9
9
|
area and SVG rendering. The matching client batch uses
|
|
10
10
|
[CLI **0.8.3**](https://www.npmjs.com/package/@vardum/cli/v/0.8.3) and
|
|
11
11
|
[shared **0.4.2**](https://www.npmjs.com/package/@vardum/shared/v/0.4.2).
|
|
12
|
-
|
|
12
|
+
This security patch updates input validation to Zod 4.6.6. The same 11 tools
|
|
13
|
+
and editor protocol remain; the MCP SDK stays at 1.32.1.
|
|
13
14
|
Older MCP 0.3.0 uses the legacy editing contract; installing it does not enable
|
|
14
15
|
revision guards. The published 0.1.0 artifact has a broken workspace dependency.
|
|
15
16
|
|
|
@@ -20,7 +21,7 @@ API key in **Settings → API keys** first; it is restricted to that workspace
|
|
|
20
21
|
and its selected permissions. Copy the workspace ID from Settings → General
|
|
21
22
|
for tool calls. Use Node.js 22 or newer.
|
|
22
23
|
|
|
23
|
-
These configurations pin **MCP 0.4.
|
|
24
|
+
These configurations pin **MCP 0.4.3** and need no source-repository access.
|
|
24
25
|
Deploy a server advertising `vardEditRevision: 1` from `GET /api/capabilities`
|
|
25
26
|
before editable Vard reads or mutations; there is no legacy-edit fallback.
|
|
26
27
|
Use a read key for inspection or a key with the required write permissions for
|
|
@@ -29,7 +30,7 @@ mutation. Keep real keys in the client's private configuration, never in Git.
|
|
|
29
30
|
Claude Code:
|
|
30
31
|
|
|
31
32
|
```sh
|
|
32
|
-
claude mcp add vardum --env VARDUM_API_KEY=varda_... -- npx -y @vardum/mcp@0.4.
|
|
33
|
+
claude mcp add vardum --env VARDUM_API_KEY=varda_... -- npx -y @vardum/mcp@0.4.3
|
|
33
34
|
```
|
|
34
35
|
|
|
35
36
|
Any client that reads a JSON config (Claude Desktop, Cursor, …):
|
|
@@ -39,7 +40,7 @@ Any client that reads a JSON config (Claude Desktop, Cursor, …):
|
|
|
39
40
|
"mcpServers": {
|
|
40
41
|
"vardum": {
|
|
41
42
|
"command": "npx",
|
|
42
|
-
"args": ["-y", "@vardum/mcp@0.4.
|
|
43
|
+
"args": ["-y", "@vardum/mcp@0.4.3"],
|
|
43
44
|
"env": { "VARDUM_API_KEY": "varda_..." }
|
|
44
45
|
}
|
|
45
46
|
}
|
package/dist/index.js
CHANGED
|
@@ -520,7 +520,7 @@ server.tool("replace_vard_items", "Replace manual items using the caller's origi
|
|
|
520
520
|
.nullable()
|
|
521
521
|
.describe("Literal saved pin: copy pinnedVersionId from get_vard, never resolved versionId. Null follows latest. Pinned outputs must not be writable."),
|
|
522
522
|
transformation: z
|
|
523
|
-
.record(z.unknown())
|
|
523
|
+
.record(z.string(), z.unknown())
|
|
524
524
|
.nullable()
|
|
525
525
|
.describe("Optional transformation parameters (w, h, fit, format, q, bg, pad, layer, darkLayer, darkColor, render) or null. bg is an opaque #rrggbb background and requires an explicit output format. For new SVG-to-raster recipes with bg, set render to v2 to rasterize vectors at the requested size before compositing. Omit render on existing recipes to preserve their renderer identity. render v2 requires an SVG source, raster format and bg. pad is a 0–45 percent inset per edge, with at most two decimals; positive pad requires w, h, a format and fit contain. SVG output requires a passive geometric SVG source, contain fit and no q. layer selects a named SVG group while preserving its canvas. darkLayer plus darkColor adapts one SVG group to dark mode. Omit bg for transparent padding."),
|
|
526
526
|
})
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@vardum/mcp",
|
|
3
|
-
"version": "0.4.
|
|
3
|
+
"version": "0.4.3",
|
|
4
4
|
"description": "MCP server for workspace-scoped Vardum assets and Vards",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"type": "module",
|
|
@@ -20,7 +20,7 @@
|
|
|
20
20
|
"dependencies": {
|
|
21
21
|
"@modelcontextprotocol/sdk": "1.32.1",
|
|
22
22
|
"@vardum/shared": "^0.4.2",
|
|
23
|
-
"zod": "
|
|
23
|
+
"zod": "4.6.6"
|
|
24
24
|
},
|
|
25
25
|
"devDependencies": {
|
|
26
26
|
"@types/node": "^26.2.0",
|