@wavespeed/mcp 1.2.9 → 1.2.10

package/dist/server.js

@@ -94,7 +94,7 @@ function progressTicker(extra, id, startedAt) {
 // catch an invented parameter. Fails open when no schema is available, and
 // re-fetches the catalog once before rejecting so a stale cache can't block
 // a valid input.
-async function assertKnownInputs(model, input) {
+async function assertKnownInputs(model, input, consequence = 'and still bills the run, so nothing was submitted') {
     let report;
     try {
         report = findUnknownInputs(input, (await fetchModels()).find((m) => m.model_id === model));
@@ -113,7 +113,7 @@ async function assertKnownInputs(model, input) {
         return s ? `${k} (did you mean ${s}?)` : k;
     });
     throw new Error(`Model ${model} does not accept: ${hints.join(', ')}. The API silently drops unknown ` +
-        `inputs and still bills the run, so nothing was submitted. Accepted inputs: ` +
+        `inputs ${consequence}. Accepted inputs: ` +
         `${report.known.join(', ')}. See get_model_schema.`);
 }
 // Input properties of an endpoint from the live catalog, for fitting a
@@ -206,6 +206,12 @@ export function createServer() {
             }
         };
         const tool = registerTool(...args);
+        // Refuse an argument the tool does not declare. zod objects strip unknown keys by default, so a misspelt
+        // name ("inputs" for get_price's "input") ran as if left out and quoted the model with no inputs at all.
+        if (typeof tool.inputSchema?.strict === 'function') {
+            const accepted = Object.keys(tool.inputSchema.shape ?? {}).sort().join(', ') || 'none';
+            tool.inputSchema = tool.inputSchema.strict(`Unknown argument for ${name}. It accepts: ${accepted}.`);
+        }
         const meta = toolMeta(name);
         if (meta)
             tool.update({ _meta: meta });
@@ -463,6 +469,8 @@ export function createServer() {
             upload: async (p) => (await uploadFile(p)).url,
         });
         const priceInput = resolved.input;
+        // Same guard as run_model: a key the model does not declare is dropped by the API and the quote ignores it.
+        await assertKnownInputs(model, priceInput, 'so the quote would not account for them');
         const data = await fetchPricing(model, priceInput);
         return ok({ ...data, estimate: true, disclaimer: PRICE_DISCLAIMER, playground_url: modelPlaygroundUrl(model) });
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wavespeed/mcp",
-  "version": "1.2.9",
+  "version": "1.2.10",
   "description": "WaveSpeed MCP server — run any model on the live WaveSpeed catalog (image, video, audio, 3D) with schema introspection, local-file upload, and price quotes.",
   "type": "module",
   "bin": {