@withpica/mcp-server 2.97.2 → 2.97.4

package/CHANGELOG.md

@@ -11,6 +11,46 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.97.4] - 2026-09-17
+
+### Fixed
+
+- **Both CAR tools now declare the scope the platform actually requires.**
+  `pica_export_catalog_asset_report` asked for `write:catalog` and
+  `pica_car_preview` for `read:catalog`, but every write under
+  `/api/admin/exports/*` is floored at `write:files` in proxy.ts, so a
+  credential holding exactly what the tools advertised was refused 403
+  before the route ran (measured against the develop preview, 2026-09-17).
+  `pica_car_preview` is also `tier: "write"` now: it creates an S3 object and
+  a `pica_exports` row, and was advertised read-only.
+  Credentials that need a catalog asset report must carry `write:files`.
+
+## [2.97.3] - 2026-09-17
+
+### Fixed
+
+- **`pica_export_catalog_asset_report` no longer signs the declaration on the
+  user's behalf.** It sent `signer_name: "MCP Agent"` with the declaration
+  pre-accepted, a statement to lenders and insurers that no person had read.
+  The report it returns is now unsigned, and says so; only a person signed in
+  to PICA can attest it, from the export panel. The same release makes the
+  route build reports for agent callers at all: it used to 401 every one.
+  Requires mcp-sdk 3.18.0.
+
+### Removed
+
+- **The `sections.audio` input** on `pica_export_catalog_asset_report` and
+  `pica_car_preview`. It was described as bundling audio master files or an
+  audio analysis section, and the report never read it.
+
+### Changed
+
+- **`pica_car_preview` no longer asks agents for a verbal attestation.** Its
+  description called the `lending` format legally weighted and told agents to
+  take a spoken attestation before calling, while the tool beneath it signed
+  the declaration as "MCP Agent". The report is unsigned whatever the format,
+  and the card's summary now says so.
+
 ## [2.97.2] - 2026-09-13
 
 ### Fixed

package/README.md

@@ -289,4 +289,4 @@ Read tools are annotated read-only and are safe to call freely. Write tools repo
 
 ---
 
-Generated for `@withpica/mcp-server@2.97.1`. © 2024-2026 Withpica Ltd. All rights reserved. MIT licensed.
+Generated for `@withpica/mcp-server@2.97.4`. © 2024-2026 Withpica Ltd. All rights reserved. MIT licensed.