@yobekasbah/mcp-server 3.0.1 → 3.0.2

package/README.md

@@ -2,7 +2,7 @@
 
 **The trust layer for agentic AI** — drop into Claude Desktop, Claude Code, Cursor, Cline, or any MCP-compatible host. Govern, sign, and verify every action your agent takes. Every decision gets a verdict + an Ed25519-signed receipt that's verifiable offline, forever.
 
-[https://bekasbah.com](https://bekasbah.com) · [Get a free API key](https://bekasbah.com/signup) · [Receipt Spec v2](https://github.com/Al-Adnane/Kasbah-Core/blob/main/docs/RECEIPT-SPEC.md)
+[https://kasbah-api.fly.dev](https://kasbah-api.fly.dev) · [Get a free API key](https://kasbah-api.fly.dev/v1/auth/signup) · [Receipt Spec v2](https://github.com/Al-Adnane/Kasbah-Core/blob/main/docs/RECEIPT-SPEC.md)
 
 ---
 
@@ -17,7 +17,7 @@ That's it. No global install needed.
 ## 1. Get a free API key
 
 ```
-https://bekasbah.com/signup
+https://kasbah-api.fly.dev/v1/auth/signup
 ```
 
 You get a key (`ksk_…`), a workspace, and a generous free tier. The key is required for the governance tools (`kasbah_attest`, `kasbah_check_compliance`, `kasbah_trace_intent`, `kasbah_cost_guard`).
@@ -33,7 +33,7 @@ Add to `~/.claude/mcp.json` (or `mcp.json` for Cursor / Cline / your host):
       "command": "npx",
       "args": ["-y", "@kasbah/mcp-server"],
       "env": {
-        "KASBAH_API":     "https://api.bekasbah.com",
+        "KASBAH_API":     "https://kasbah-api.fly.dev",
         "KASBAH_API_KEY": "ksk_your_key_here",
         "KASBAH_AGENT":   "my-agent"
       }
@@ -145,10 +145,10 @@ const g = await mcp.call('kasbah_cost_guard', { agent: 'orchestrator', tool: 'we
 
 | Var | Default | What it controls |
 |---|---|---|
-| `KASBAH_API` | `http://127.0.0.1:8788` | Engine endpoint (use `https://api.bekasbah.com` for hosted) |
-| `KASBAH_API_KEY` | _(none)_ | **Required** for governance tools. Free key at [bekasbah.com/signup](https://bekasbah.com/signup) |
+| `KASBAH_API` | `http://127.0.0.1:8788` | Engine endpoint (use `https://kasbah-api.fly.dev` for hosted) |
+| `KASBAH_API_KEY` | _(none)_ | **Required** for governance tools. Free key at [get a free key](https://kasbah-api.fly.dev/v1/auth/signup) |
 | `KASBAH_AGENT` | `mcp-agent` | Identifier in audit receipts |
-| `KASBAH_VERIFY_BASE` | `https://verify.bekasbah.com` | Public verifier URL stamped into receipts |
+| `KASBAH_VERIFY_BASE` | `https://kasbah-api.fly.dev/demo/verify` | Public verifier URL stamped into receipts |
 | `KASBAH_NO_TELEMETRY` | _(unset)_ | Set to `1` to opt out of the anonymous boot-count ping to `/_pulse`. We collect zero prompts, payloads, or PII — only that the MCP started. |
 
 ## Got feedback? Found a bug?
@@ -175,7 +175,7 @@ p.stdout.on('data', d => { console.log(d.toString()); p.kill(); });
 Every receipt this server returns is **Ed25519-signed by the engine** following [Receipt Spec v2](https://github.com/Al-Adnane/Kasbah-Core/blob/main/docs/RECEIPT-SPEC.md). Anyone with the engine's public key can verify it offline:
 
 ```bash
-curl https://bekasbah.com/.well-known/kasbah-keys.json
+curl https://kasbah-api.fly.dev/.well-known/kasbah-keys.json
 # → { "keys": [{ "kid": "029e59…", "alg": "EdDSA", "crv": "Ed25519", "x": "…" }] }
 ```
 
@@ -207,7 +207,7 @@ The governance tools call the Kasbah engine at the configured `KASBAH_API` URL.
 If the engine is unreachable, `kasbah_attest` still signs the action but marks it
 `governed: false` (fail-open on availability, never on a real DENY). The other
 governance tools surface a clear error. For production, use the hosted endpoint
-`https://api.bekasbah.com` or run the engine on a high-availability host.
+`https://kasbah-api.fly.dev` or run the engine on a high-availability host.
 
 ## License
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yobekasbah/mcp-server",
-  "version": "3.0.1",
+  "version": "3.0.2",
   "mcpName": "io.github.Al-Adnane/kasbah-mcp",
   "description": "Kasbah MCP Server — cryptographic trust layer for agentic AI. Govern, sign, and verify every agent action from Claude Code, Cursor, or any MCP host.",
   "main": "src/index.js",

package/src/index.js

@@ -36,13 +36,13 @@
  *     "command": "npx",
  *     "args": ["-y", "@kasbah/mcp-server"],
  *     "env": {
- *       "KASBAH_API":     "https://api.bekasbah.com",
- *       "KASBAH_API_KEY": "ksk_…your key from bekasbah.com/signup…",
+ *       "KASBAH_API":     "https://kasbah-api.fly.dev",
+ *       "KASBAH_API_KEY": "ksk_…your key from kasbah-api.fly.dev/v1/auth/signup…",
  *       "KASBAH_AGENT":   "my-agent"
  *     }
  *   }
  *
- * Get a free key at https://bekasbah.com/signup. For local dev point
+ * Get a free key at https://kasbah-api.fly.dev/v1/auth/signup. For local dev point
  * KASBAH_API at http://127.0.0.1:8788.
  *
  * Protocol: JSON-RPC 2.0 over stdio (MCP spec 2024-11-05).
@@ -56,7 +56,7 @@ const { URL } = require('url');
 const KASBAH_API  = (process.env.KASBAH_API || process.env.KASBAH_API_URL || 'http://127.0.0.1:8788').replace(/\/+$/, '');
 const AGENT       = process.env.KASBAH_AGENT || process.env.KASBAH_PASSPORT_ID || 'mcp-agent';
 const API_KEY     = process.env.KASBAH_API_KEY || null;
-const VERIFY_BASE = (process.env.KASBAH_VERIFY_BASE || 'https://verify.bekasbah.com').replace(/\/+$/, '');
+const VERIFY_BASE = (process.env.KASBAH_VERIFY_BASE || 'https://kasbah-api.fly.dev/demo/verify').replace(/\/+$/, '');
 
 const MCP_VERSION = '2024-11-05';
 const SERVER_INFO = { name: 'kasbah', version: '3.0.0' };
@@ -351,7 +351,7 @@ async function handleAttest(args) {
     } else if (g.status === 401) {
       return textResult({
         error: 'unauthorized',
-        hint: 'Set KASBAH_API_KEY in your MCP config. Get a free key at https://bekasbah.com/signup'
+        hint: 'Set KASBAH_API_KEY in your MCP config. Get a free key at https://kasbah-api.fly.dev/v1/auth/signup'
       });
     }
   } catch (_) { /* offline → sign anyway, marked unverified by engine */ }
@@ -388,7 +388,7 @@ async function handleVerify(args) {
     merkleVerified: res.body?.merkleVerified,
     decoded: res.body?.decoded || null,
     verifyOffline: `${VERIFY_BASE}/?r=${encodeURIComponent(receipt)}&p=${encodeURIComponent(payload)}`,
-    spec: res.body?.spec || 'https://bekasbah.com/spec/receipt-v2'
+    spec: res.body?.spec || 'https://github.com/Al-Adnane/Kasbah-Core/blob/main/docs/RECEIPT-SPEC-v3.md'
   });
 }
 
@@ -398,7 +398,7 @@ async function handleCheckCompliance(args) {
   const res = await httpJson('POST', KASBAH_API + '/v1/algorithms/policy-engine/run', {
     verb, target: target || '', content: content || '', packs: packs || 'HIPAA,GDPR,SOC2,BIOMETRIC_GUARD'
   });
-  if (res.status === 401) return textResult({ error: 'unauthorized', hint: 'Set KASBAH_API_KEY. Free key: https://bekasbah.com/signup' });
+  if (res.status === 401) return textResult({ error: 'unauthorized', hint: 'Set KASBAH_API_KEY. Free key: https://kasbah-api.fly.dev/v1/auth/signup' });
   const r = res.body?.result || res.body || {};
   return textResult({
     decision: r.verdict || 'UNKNOWN',
@@ -416,7 +416,7 @@ async function handleTraceIntent(args) {
   const { steps } = args || {};
   if (!steps) throw new Error('steps is required (one "VERB target" per line)');
   const res = await httpJson('POST', KASBAH_API + '/v1/algorithms/intent-trajectory/run', { steps });
-  if (res.status === 401) return textResult({ error: 'unauthorized', hint: 'Set KASBAH_API_KEY. Free key: https://bekasbah.com/signup' });
+  if (res.status === 401) return textResult({ error: 'unauthorized', hint: 'Set KASBAH_API_KEY. Free key: https://kasbah-api.fly.dev/v1/auth/signup' });
   const r = res.body?.result || res.body || {};
   return textResult({
     verdict: r.verdict || 'UNKNOWN',
@@ -436,7 +436,7 @@ async function handleCostGuard(args) {
   const res = await httpJson('POST', KASBAH_API + '/v1/algorithms/cost-watch/run', {
     agent, tool, calls: calls ?? 1, tokens: tokens ?? 1200
   });
-  if (res.status === 401) return textResult({ error: 'unauthorized', hint: 'Set KASBAH_API_KEY. Free key: https://bekasbah.com/signup' });
+  if (res.status === 401) return textResult({ error: 'unauthorized', hint: 'Set KASBAH_API_KEY. Free key: https://kasbah-api.fly.dev/v1/auth/signup' });
   const r = res.body?.result || res.body || {};
   const decision = r.detail?.decision || {};
   return textResult({
@@ -491,7 +491,7 @@ async function handleStatus() {
       latest_receipt: lastReceipt,
       verify_latest_offline_url: lastReceipt && lastReceiptPayload
         ? `${VERIFY_BASE}/?r=${encodeURIComponent(lastReceipt)}&p=${encodeURIComponent(lastReceiptPayload)}` : null,
-      spec: 'https://bekasbah.com/spec/receipt-v2'
+      spec: 'https://github.com/Al-Adnane/Kasbah-Core/blob/main/docs/RECEIPT-SPEC-v3.md'
     },
     dashboards: {
       live_stream: KASBAH_API.replace(/:8788$/, ':3001') + '/dashboard',
@@ -517,7 +517,7 @@ async function handleExportAudit(args) {
     agent: AGENT,
     engine: KASBAH_API,
     signing_public_key: pubKey,
-    receipt_spec: 'https://bekasbah.com/spec/receipt-v2',
+    receipt_spec: 'https://github.com/Al-Adnane/Kasbah-Core/blob/main/docs/RECEIPT-SPEC-v3.md',
     standalone_verifier: `${VERIFY_BASE}/`,
     entry_count: entries.length,
     filter: { limit, verdict: verdict || null },
@@ -642,7 +642,7 @@ process.stdin.on('data', async (chunk) => {
 });
 
 process.stderr.write(`[kasbah-mcp] up · api=${KASBAH_API} · agent=${AGENT} · key=${API_KEY ? 'set' : 'MISSING'} · v${SERVER_INFO.version}\n`);
-if (!API_KEY) process.stderr.write('[kasbah-mcp] no KASBAH_API_KEY — govern/compliance/intent/cost tools need one. Free key: https://bekasbah.com/signup\n');
+if (!API_KEY) process.stderr.write('[kasbah-mcp] no KASBAH_API_KEY — govern/compliance/intent/cost tools need one. Free key: https://kasbah-api.fly.dev/v1/auth/signup\n');
 
 // Anonymous boot ping — count only, no prompts/payloads/PII. Opt out: KASBAH_NO_TELEMETRY=1.
 if (!process.env.KASBAH_NO_TELEMETRY) {