@visa/cli 2.0.0-rc.45 → 2.0.0-rc.47

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/README.md +3 -1
  2. package/dist/cli.js +84 -84
  3. package/dist/mcp-server/index.js +17 -17
  4. package/package.json +1 -1
package/README.md CHANGED
@@ -95,6 +95,8 @@ Share your referral link (visible in `get_status`) and you both get **$2 in free
95
95
 
96
96
  Every paid tool call requires authentication. On macOS, this is Touch ID (or device password); on Windows and Linux, payments are server-verified with restricted spending limits. Your assistant will show you the amount and merchant before prompting. If you cancel, the payment is aborted — nothing is charged.
97
97
 
98
+ Remote CLI/MCP servers can run ordinary paid tools under those server-enforced limits, but card-funded credit top-ups require local biometric attestation. Credits and the biometric preference are account-level: top up from any interactive Touch ID-capable CLI signed into the same account, optionally run `visa-cli biometric off` there for remote ordinary payments, then use that balance from the remote server. Credit top-ups still require local attestation even when biometric is off. For unattended server workloads, scoped API keys with daily caps are also supported.
99
+
98
100
  You can set hard limits via the `update_spending_controls` tool, or check your current limits any time:
99
101
 
100
102
  ```bash
@@ -210,7 +212,7 @@ Paid calls then spend from that approval window until the cap is used, `close_se
210
212
  ## Troubleshooting
211
213
 
212
214
  **Touch ID prompt doesn't appear (macOS)**
213
- Make sure the MCP process (`node …/dist/mcp-server/index.js`) runs in a foreground TTY with access to the macOS security framework. Running inside some sandboxed environments may prevent Touch ID. On Windows and Linux, biometric prompts are not used — payments are server-verified.
215
+ Make sure the MCP process (`node …/dist/mcp-server/index.js`) runs in a foreground TTY with access to the macOS security framework. Running inside some sandboxed environments may prevent Touch ID. On Windows and Linux, biometric prompts are not used for ordinary payments. Buying credits with an enrolled card currently requires local biometric attestation from the CLI; remote servers can spend account balance topped up from any interactive Touch ID-capable CLI signed into the same account.
214
216
 
215
217
  **"Not logged in" after `visa-cli login`**
216
218
  Restart the MCP server after logging in — your MCP client needs to reconnect to pick up the new session.