ccs-mcp-server 1.2.3 → 1.2.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +0 -0
- package/README.md +29 -3
- package/package.json +5 -5
- package/src/index.js +1 -1
- package/src/receipts.js +0 -0
package/LICENSE
CHANGED
|
File without changes
|
package/README.md
CHANGED
|
@@ -25,7 +25,7 @@ npx -y ccs-mcp-server
|
|
|
25
25
|
}
|
|
26
26
|
```
|
|
27
27
|
|
|
28
|
-
Zero dependencies.
|
|
28
|
+
Zero dependencies. 44KB. Pure Node.js stdlib. No install scripts.
|
|
29
29
|
|
|
30
30
|
## Tools
|
|
31
31
|
|
|
@@ -111,19 +111,45 @@ evidence 4: denied (fs + curl exfil) parent: ev3
|
|
|
111
111
|
6. **Latency** — execution time budget
|
|
112
112
|
7. **Cost** — cost budget
|
|
113
113
|
|
|
114
|
+
## Interoperability
|
|
115
|
+
|
|
116
|
+
CCS receipts are Ed25519-signed, JSON-based, and verifiable offline with zero dependencies. If your project produces or verifies signed attestations, receipts, or evidence records, see **[INTEGRATION.md](INTEGRATION.md)** — a one-page guide covering:
|
|
117
|
+
|
|
118
|
+
- Full receipt field schema (22 fields)
|
|
119
|
+
- JCS canonicalization spec
|
|
120
|
+
- Three levels of interop (same crypto → cross-referenced chains → field-aligned)
|
|
121
|
+
- 30-second verification snippets (Node.js + Python)
|
|
122
|
+
- Clear scope boundaries (what CCS does / does not cover)
|
|
123
|
+
|
|
124
|
+
Join technical discussions in **[GitHub Discussions](https://github.com/DSHCorrectover/ccs-mcp-server/discussions)** — receipt interoperability, field mapping proposals, and protocol feedback welcome.
|
|
125
|
+
|
|
114
126
|
## Protocol Context
|
|
115
127
|
|
|
116
128
|
- **IETF**: [draft-correctover-ccs-06](https://datatracker.ietf.org/doc/draft-correctover-ccs/) (Experimental) — RT#55620 submitted
|
|
117
129
|
- **Complements**: [VAP draft-samal-vap-00](https://datatracker.ietf.org/doc/draft-samal-vap/) (scope/budget/purpose), [Microsoft ACS](https://github.com/microsoft/agent-governance-toolkit) (policy decisions), AP2 (human authorization)
|
|
118
130
|
- **Does not replace**: authentication, payment networks, policy engines
|
|
119
131
|
|
|
132
|
+
## Ecosystem
|
|
133
|
+
|
|
134
|
+
| Project | What it does |
|
|
135
|
+
|---------|-------------|
|
|
136
|
+
| [ccs-demo](https://github.com/DSHCorrectover/ccs-demo) | Complete INSPECT→SIGN→VERIFY walkthrough — 6 scenarios, zero dependencies, `node demo.js` |
|
|
137
|
+
| [ccs-verifier-action](https://github.com/DSHCorrectover/ccs-verifier-action) | GitHub Action — verify CCS receipts in CI/CD pipelines |
|
|
138
|
+
| [ccs-mcp-server](https://github.com/DSHCorrectover/ccs-mcp-server) | Core MCP server (this repo) — runtime verification + evidence signing |
|
|
139
|
+
| [ccs-proxy](https://dshcorrectover.github.io/ccs-proxy/) | **Commercial** — inline enforcement proxy with L2 protocol attestation + L3 execution binding (Ed25519 signed receipts) |
|
|
140
|
+
|
|
120
141
|
## Links
|
|
121
142
|
|
|
122
143
|
- npm: https://www.npmjs.com/package/ccs-mcp-server
|
|
123
|
-
- GitHub: https://github.com/
|
|
144
|
+
- GitHub: https://github.com/DSHCorrectover/ccs-mcp-server
|
|
124
145
|
- IETF Draft: https://datatracker.ietf.org/doc/draft-correctover-ccs/
|
|
125
146
|
- PyPI (full verifier): https://pypi.org/project/ccs-verifier/
|
|
147
|
+
- Demo: https://github.com/DSHCorrectover/ccs-demo
|
|
148
|
+
- GitHub Action: https://github.com/DSHCorrectover/ccs-verifier-action
|
|
149
|
+
- Discussions: https://github.com/DSHCorrectover/ccs-mcp-server/discussions
|
|
150
|
+
- CCS Proxy (commercial): https://dshcorrectover.github.io/ccs-proxy/
|
|
151
|
+
- Integration Guide: [INTEGRATION.md](INTEGRATION.md)
|
|
126
152
|
|
|
127
153
|
## License
|
|
128
154
|
|
|
129
|
-
|
|
155
|
+
[Elastic License 2.0 (ELv2)](LICENSE) — see the full terms. Reference implementation for CCS standard evaluation.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "ccs-mcp-server",
|
|
3
|
-
"version": "1.2.
|
|
3
|
+
"version": "1.2.5",
|
|
4
4
|
"description": "CCS Runtime Evidence MCP Server \u2014 7-dimension runtime verification for AI agent tool calls. Ed25519 receipts, sub-ms OOP, zero deps. For Claude Desktop, Cursor, Windsurf.",
|
|
5
5
|
"type": "commonjs",
|
|
6
6
|
"bin": {
|
|
@@ -35,6 +35,9 @@
|
|
|
35
35
|
"url": "git+https://github.com/DSHCorrectover/ccs-mcp-server.git"
|
|
36
36
|
},
|
|
37
37
|
"homepage": "https://github.com/DSHCorrectover/ccs-mcp-server#readme",
|
|
38
|
+
"bugs": {
|
|
39
|
+
"url": "https://github.com/DSHCorrectover/ccs-mcp-server/issues"
|
|
40
|
+
},
|
|
38
41
|
"engines": {
|
|
39
42
|
"node": ">=18"
|
|
40
43
|
},
|
|
@@ -45,9 +48,6 @@
|
|
|
45
48
|
"mcp": {
|
|
46
49
|
"name": "ccs-runtime-evidence",
|
|
47
50
|
"displayName": "CCS Runtime Evidence",
|
|
48
|
-
"description": "Verify AI agent tool calls and issue Ed25519-signed CCS evidence receipts.
|
|
49
|
-
},
|
|
50
|
-
"bugs": {
|
|
51
|
-
"url": "https://github.com/DSHCorrectover/ccs-mcp-server/issues"
|
|
51
|
+
"description": "Verify AI agent tool calls and issue Ed25519-signed CCS evidence receipts."
|
|
52
52
|
}
|
|
53
53
|
}
|
package/src/index.js
CHANGED
|
@@ -32,7 +32,7 @@ const receipts = require("./receipts");
|
|
|
32
32
|
// CCS Verifier Core (pure stdlib Node.js)
|
|
33
33
|
// ---------------------------------------------------------------------------
|
|
34
34
|
|
|
35
|
-
const CCS_VERSION = "1.2.
|
|
35
|
+
const CCS_VERSION = "1.2.5";
|
|
36
36
|
|
|
37
37
|
const DEFAULT_POLICY = {
|
|
38
38
|
mode: "block",
|
package/src/receipts.js
CHANGED
|
File without changes
|