@yawlabs/mcp-compliance 0.5.0 → 0.7.0

package/dist/mcp/server.js

@@ -2,7 +2,7 @@ import {
   SPEC_BASE,
   TEST_DEFINITIONS,
   runComplianceSuite
-} from "../chunk-Z7VLPYIO.js";
+} from "../chunk-SELO4TOW.js";
 
 // src/mcp/server.ts
 import { createRequire } from "module";
@@ -14,13 +14,13 @@ import { z } from "zod";
 function registerTools(server) {
   server.tool(
     "mcp_compliance_test",
-    "Run the full MCP compliance test suite against a server URL. Returns grade (A-F), score, and detailed results for all 48 tests covering transport, lifecycle, tools, resources, prompts, errors, and schema validation.",
+    "Run the full MCP compliance test suite against a server URL. Returns grade (A-F), score, and detailed results for all 78 tests covering transport, lifecycle, tools, resources, prompts, errors, schema validation, and security.",
     {
       url: z.string().url().describe("The MCP server URL to test (must be HTTP or HTTPS)"),
       auth: z.string().optional().describe('Authorization header value (e.g., "Bearer tok123")'),
       headers: z.record(z.string()).optional().describe('Additional headers to include on all requests (e.g., {"X-Api-Key": "abc"})'),
-      timeout: z.number().optional().describe("Request timeout in milliseconds (default: 15000)"),
-      retries: z.number().optional().describe("Number of retries for failed tests (default: 0)"),
+      timeout: z.number().int().min(1).max(3e5).optional().describe("Request timeout in milliseconds (default: 15000, max: 300000)"),
+      retries: z.number().int().min(0).max(10).optional().describe("Number of retries for failed tests (default: 0, max: 10)"),
       only: z.array(z.string()).optional().describe("Only run tests matching these categories or test IDs"),
       skip: z.array(z.string()).optional().describe("Skip tests matching these categories or test IDs")
     },
@@ -85,7 +85,7 @@ ${JSON.stringify(report, null, 2)}` }
       url: z.string().url().describe("The MCP server URL to test"),
       auth: z.string().optional().describe('Authorization header value (e.g., "Bearer tok123")'),
       headers: z.record(z.string()).optional().describe("Additional headers to include on all requests"),
-      timeout: z.number().optional().describe("Request timeout in milliseconds (default: 15000)")
+      timeout: z.number().int().min(1).max(3e5).optional().describe("Request timeout in milliseconds (default: 15000, max: 300000)")
     },
     {
       title: "Get Compliance Badge",

package/dist/runner.d.ts

@@ -1,4 +1,4 @@
-type TestCategory = "transport" | "lifecycle" | "tools" | "resources" | "prompts" | "errors" | "schema";
+type TestCategory = "transport" | "lifecycle" | "tools" | "resources" | "prompts" | "errors" | "schema" | "security";
 interface TestResult {
     id: string;
     name: string;
@@ -60,7 +60,7 @@ interface TestDefinition {
     description: string;
     recommendation: string;
 }
-/** All 48 test IDs with descriptions for the explain command */
+/** All 78 test IDs with descriptions for the explain command */
 declare const TEST_DEFINITIONS: TestDefinition[];
 
 declare function computeGrade(score: number): Grade;

package/dist/runner.js

@@ -7,7 +7,7 @@ import {
   generateBadge,
   parseSSEResponse,
   runComplianceSuite
-} from "./chunk-Z7VLPYIO.js";
+} from "./chunk-SELO4TOW.js";
 export {
   SPEC_BASE,
   SPEC_VERSION,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yawlabs/mcp-compliance",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "description": "CLI tool and MCP server that tests MCP servers for spec compliance",
   "license": "MIT",
   "author": "Yaw Labs <contact@yaw.sh> (https://yaw.sh)",
@@ -9,6 +9,10 @@
     ".": {
       "import": "./dist/runner.js",
       "types": "./dist/runner.d.ts"
+    },
+    "./mcp/server": {
+      "import": "./dist/mcp/server.js",
+      "types": "./dist/mcp/server.d.ts"
     }
   },
   "main": "./dist/runner.js",