agent-passport-system-mcp 2.21.1 → 2.21.2

package/README.md

@@ -208,7 +208,7 @@ Layer 1 — Agent Passport Protocol (Ed25519 identity)
 
 ## Links
 
-- npm SDK: [agent-passport-system](https://www.npmjs.com/package/agent-passport-system) (v1.36.2, 2468 tests)
+- npm SDK: [agent-passport-system](https://www.npmjs.com/package/agent-passport-system) (v1.36.3, 2468 tests)
 - Python SDK: [agent-passport-system](https://pypi.org/project/agent-passport-system/) (v0.8.0)
 - Paper (Protocol): [doi.org/10.5281/zenodo.18749779](https://doi.org/10.5281/zenodo.18749779)
 - Paper (Faceted Narrowing): [doi.org/10.5281/zenodo.19260073](https://doi.org/10.5281/zenodo.19260073)

package/build/index.js

@@ -365,6 +365,7 @@ const server = new McpServer({
 });
 // Track server start time for Tier 0 connection timing
 globalThis.__mcpStartTime = Date.now();
+// (try/catch wrapper merged into profile filter below)
 // ═══════════════════════════════════════
 // Tool Profiles — expose only relevant tools
 // ═══════════════════════════════════════
@@ -448,14 +449,26 @@ const TOOL_PROFILES = {
 };
 const activeProfile = (process.env.APS_PROFILE || 'full').toLowerCase();
 const profileFilter = TOOL_PROFILES[activeProfile];
-// Wrap server.tool to respect profile filtering
+// Wrap server.tool: profile filtering + try/catch on all handlers
 const _origTool = server.tool.bind(server);
 server.tool = function (name, ...rest) {
-    if (name === 'list_profiles')
-        return _origTool(name, ...rest);
-    if (activeProfile === 'full' || !profileFilter || profileFilter.has(name)) {
-        return _origTool(name, ...rest);
+    if (name !== 'list_profiles' && activeProfile !== 'full' && profileFilter && !profileFilter.has(name)) {
+        return; // filtered out by profile
     }
+    // Wrap the handler (last arg) with try/catch to prevent crashes
+    const handlerIdx = rest.length - 1;
+    const origHandler = rest[handlerIdx];
+    if (typeof origHandler === 'function') {
+        rest[handlerIdx] = async (...args) => {
+            try {
+                return await origHandler(...args);
+            }
+            catch (e) {
+                return { content: [{ type: "text", text: JSON.stringify({ error: e.message || String(e) }) }], isError: true };
+            }
+        };
+    }
+    return _origTool(name, ...rest);
 };
 // ═══════════════════════════════════════
 // Scope-Based Tool Filtering (Primitive #9: Tool Pool Assembly)
@@ -694,14 +707,17 @@ server.tool("identify", "Identify yourself to the coordination server. Sets your
 // ═══════════════════════════════════════
 server.tool("generate_keys", "Generate an Ed25519 keypair for agent identity.", {}, async () => {
     const keys = generateKeyPair();
+    const isRemote = process.env.MCP_TRANSPORT === 'sse' || process.env.MCP_REMOTE === '1';
     return {
         content: [{
                 type: "text",
                 text: JSON.stringify({
                     publicKey: keys.publicKey,
-                    privateKey: keys.privateKey,
+                    privateKey: isRemote ? '[REDACTED — use local MCP for key generation]' : keys.privateKey,
                     algorithm: "Ed25519",
-                    note: "Use these with the identify tool or AGENT_KEY/AGENT_PRIVATE_KEY env vars.",
+                    note: isRemote
+                        ? "WARNING: Private key redacted because this is a remote MCP server. Generate keys locally via stdio transport for security."
+                        : "Use these with the identify tool or AGENT_KEY/AGENT_PRIVATE_KEY env vars. WARNING: Private keys should not be transmitted over remote transports.",
                 }, null, 2),
             }],
     };
@@ -795,7 +811,9 @@ server.tool("issue_passport", "Issue a complete agent passport with keys, signed
                 text: JSON.stringify({
                     passport: attestedPassport,
                     publicKey: attestedPassport.passport.publicKey,
-                    privateKey: agent.keyPair.privateKey,
+                    privateKey: (process.env.MCP_TRANSPORT === 'sse' || process.env.MCP_REMOTE === '1')
+                        ? '[REDACTED — use local MCP for key generation]'
+                        : agent.keyPair.privateKey,
                     agentId: attestedPassport.passport.agentId,
                     attestation: agent.attestation || null,
                     passportAttestation: attestedPassport.attestation,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-passport-system-mcp",
-  "version": "2.21.1",
+  "version": "2.21.2",
   "mcpName": "io.github.aeoess/agent-passport-mcp",
   "description": "MCP server for the Agent Passport System — enforcement infrastructure for the agent economy. 132 tools across 103 modules. Policy eval <2ms. Identity, delegation, reputation, enforcement, attestation, feeless Nano wallet, commerce.",
   "type": "module",
@@ -49,7 +49,7 @@
   "homepage": "https://github.com/aeoess/agent-passport-mcp",
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.27.1",
-    "agent-passport-system": "^1.36.1",
+    "agent-passport-system": "^1.36.3",
     "zod": "^3.25.76"
   },
   "devDependencies": {