@visa/cli 1.1.2 → 1.2.0-rc.1

package/README.md

@@ -1,6 +1,14 @@
 # @visa/cli
 
-AI-powered payments over MCP. Exposes Visa card payment tools as MCP (Model Context Protocol) tools so your AI assistant can pay for image generation, video, music, onchain data queries, and more — charged to a Visa card with Touch ID confirmation at the point of invocation.
+AI-powered payments over MCP. Exposes Visa card payment tools as MCP (Model Context Protocol) tools so your AI assistant can pay for image generation, video, music, onchain data queries, and more — charged to a Visa card with authentication confirmation at the point of invocation.
+
+### Platform support
+
+| Platform | Credential Storage | Payment Auth | Install |
+|----------|-------------------|--------------|---------|
+| **macOS** | Keychain | Touch ID / Secure Enclave | `bash <(curl -fsSL ...)` or `npm i -g @visa/cli` |
+| **Windows** | ACL-restricted file | Server-verified (restricted limits) | `npm i -g @visa/cli` or PowerShell installer |
+| **Linux** | libsecret (GNOME Keyring / KDE Wallet) | Server-verified (restricted limits) | `bash <(curl -fsSL ...)` or `npm i -g @visa/cli` |
 
 ## Install
 
@@ -58,13 +66,13 @@ Cards are tokenized via VGS — your raw card number never touches Visa servers.
 visa-cli add-card
 ```
 
-Multiple cards can be enrolled. The first becomes the default; you can switch defaults with `set_default_card` from within your assistant. To remove a card: `remove_card` (requires Touch ID).
+Multiple cards can be enrolled. The first becomes the default; you can switch defaults with `set_default_card` from within your assistant. To remove a card: `remove_card` (requires authentication).
 
 ---
 
-## Payments & Touch ID
+## Payments & Authentication
 
-Every paid tool call requires Touch ID (or device password on macOS). Your assistant will show you the amount and merchant before prompting. If you cancel Touch ID, the payment is aborted — nothing is charged.
+Every paid tool call requires authentication. On macOS, this is Touch ID (or device password); on Windows and Linux, payments are server-verified with restricted spending limits. Your assistant will show you the amount and merchant before prompting. If you cancel, the payment is aborted — nothing is charged.
 
 You can set hard limits via the `update_spending_controls` tool, or check your current limits any time:
 
@@ -83,10 +91,10 @@ visa-cli status
 | `login` | GitHub OAuth login — opens browser |
 | `add_card` | Enroll a card via VGS tokenization |
 | `get_cards` | List enrolled cards (masked) |
-| `remove_card` | Remove an enrolled card (Touch ID required) |
-| `set_default_card` | Change the default card (Touch ID required) |
+| `remove_card` | Remove an enrolled card (authentication required) |
+| `set_default_card` | Change the default card (authentication required) |
 | `get_status` | Auth, card, spend limits, and budget summary |
-| `update_spending_controls` | Set daily and per-transaction limits (Touch ID required) |
+| `update_spending_controls` | Set daily and per-transaction limits (authentication required) |
 | `transaction_history` | Recent transactions with amounts and media URLs |
 | `feedback` | Submit feedback on a tool result |
 | `reset` | Clear auth state and credentials |
@@ -119,7 +127,7 @@ visa-cli status
 | Tool | Description |
 |------|-------------|
 | `pay` | Generic HTTP 402 payment endpoint |
-| `batch` | Execute multiple paid tools in one Touch ID approval |
+| `batch` | Execute multiple paid tools in one authentication approval |
 | `discover_tools` | Search the dynamic tool catalog |
 | `execute_tool` | Run a tool from the dynamic catalog by ID |
 
@@ -142,7 +150,7 @@ Daily limit         — hard cap on total spend per day
 Max per-transaction — hard cap per single tool call
 ```
 
-Both limits are enforced server-side. Touch ID is always required per payment regardless of limits — this cannot be disabled.
+Both limits are enforced server-side. Authentication is always required per payment regardless of limits — this cannot be disabled. On macOS this means Touch ID; on other platforms, server-side verification with restricted spending limits applies.
 
 ---
 
@@ -158,8 +166,8 @@ Both limits are enforced server-side. Touch ID is always required per payment re
 
 ## Troubleshooting
 
-**Touch ID prompt doesn't appear**
-Make sure `visa-cli mcp` is running as a foreground process that has access to the macOS security framework. Running inside some sandboxed environments may prevent Touch ID.
+**Touch ID prompt doesn't appear (macOS)**
+Make sure `visa-cli mcp` is running as a foreground process that has access to the macOS security framework. Running inside some sandboxed environments may prevent Touch ID. On Windows and Linux, biometric prompts are not used — payments are server-verified.
 
 **"Not logged in" after `visa-cli login`**
 Restart the MCP server after logging in — your MCP client needs to reconnect to pick up the new session.