data-compliance-mcp 1.0.24 → 1.0.26

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## [1.0.26] - 2026-06-26
+- fix: trial extension requests now written to Redis (dcc:trial:{email}) on grant -- permanent audit trail that survives redeploys; previously in-memory only
+
+## [1.0.25] - 2026-06-25
+- feat: calls_remaining field added to every successful tool response -- "unlimited" for paid keys, numeric free-tier headroom otherwise
+- feat: verdict_ttl field added to validate_data_safety, validate_data_safety_lite, get_safety_report responses (86400s/24h each)
+- feat: data_source_status field added (full/degraded/partial) -- get_safety_report BATCH mode reports "degraded" when AI classification fails for any individual payload in the batch (AI is the critical source for this server); validate_data_safety_lite is always "full" (pattern-only, no AI dependency)
+
 ## [1.0.24] - 2026-06-24
 - feat: unauthenticated /public-stats endpoint -- first_deployed, lifetime tool calls, uptime %, version, for agent orchestrators evaluating server trustworthiness
 - feat: /process-trial-followups endpoint + 24h follow-up record on trial-extension grant

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "data-compliance-mcp",
   "mcpName": "io.github.OjasKord/data-compliance-mcp",
-  "version": "1.0.24",
+  "version": "1.0.26",
   "description": "Data safety classifier for AI agents. GDPR, HIPAA, PCI-DSS compliance before your agent stores or shares any payload. SAFE/ESCALATE verdict in one call.",
   "main": "src/server.js",
   "scripts": {

package/server.json

@@ -1,42 +1,42 @@
-{
-  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
-  "name": "io.github.OjasKord/data-compliance-mcp",
-  "title": "Data Compliance Classifier MCP",
-  "description": "Classify data safety before storing or sharing. GDPR, HIPAA, PCI-DSS, CCPA. AI-powered.",
-  "version": "1.0.19",
-  "websiteUrl": "https://kordagencies.com",
-  "repository": {
-    "url": "https://github.com/OjasKord/data-compliance-mcp",
-    "source": "github"
-  },
-  "packages": [
-    {
-      "registryType": "npm",
-      "identifier": "data-compliance-mcp",
-      "version": "1.0.19",
-      "transport": {
-        "type": "stdio"
-      },
-      "environmentVariables": [
-        {
-          "name": "ANTHROPIC_API_KEY",
-          "description": "Anthropic API key for AI classification",
-          "isRequired": true,
-          "isSecret": true
-        },
-        {
-          "name": "ABUSEIPDB_API_KEY",
-          "description": "AbuseIPDB API key for threat intelligence (optional)",
-          "isRequired": false,
-          "isSecret": true
-        }
-      ]
-    }
-  ],
-  "remotes": [
-    {
-      "type": "streamable-http",
-      "url": "https://data-compliance-mcp-production.up.railway.app"
-    }
-  ]
-}
+{
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
+  "name": "io.github.OjasKord/data-compliance-mcp",
+  "title": "Data Compliance Classifier MCP",
+  "description": "Classify data safety before storing or sharing. GDPR, HIPAA, PCI-DSS, CCPA. AI-powered.",
+  "version": "1.0.25",
+  "websiteUrl": "https://kordagencies.com",
+  "repository": {
+    "url": "https://github.com/OjasKord/data-compliance-mcp",
+    "source": "github"
+  },
+  "packages": [
+    {
+      "registryType": "npm",
+      "identifier": "data-compliance-mcp",
+      "version": "1.0.25",
+      "transport": {
+        "type": "stdio"
+      },
+      "environmentVariables": [
+        {
+          "name": "ANTHROPIC_API_KEY",
+          "description": "Anthropic API key for AI classification",
+          "isRequired": true,
+          "isSecret": true
+        },
+        {
+          "name": "ABUSEIPDB_API_KEY",
+          "description": "AbuseIPDB API key for threat intelligence (optional)",
+          "isRequired": false,
+          "isSecret": true
+        }
+      ]
+    }
+  ],
+  "remotes": [
+    {
+      "type": "streamable-http",
+      "url": "https://data-compliance-mcp-production.up.railway.app"
+    }
+  ]
+}

package/src/server.js

@@ -3,7 +3,7 @@ const https = require('https');
 const crypto = require('crypto');
 const fs = require('fs');
 
-const VERSION = '1.0.24';
+const VERSION = '1.0.26';
 const FIRST_DEPLOYED = '2026-04-21T09:53:12Z';
 const LIFETIME_CALLS_REDIS_KEY = 'dcc:lifetime_calls';
 const UPTIME_HEARTBEAT_KEY = 'dcc:uptime:heartbeat_count';
@@ -23,6 +23,8 @@ const freeTierUsage = new Map();
 const usageLog = [];
 const FREE_TIER_LIMIT = 20;
 const FREE_TIER_WARNING = 16;
+// Caching/staleness policy per tool, in seconds.
+const VERDICT_TTL = { validate_data_safety: 86400, validate_data_safety_lite: 86400, get_safety_report: 86400 };
 const apiKeys = new Map();
 const PLAN_LIMITS = { pro: 5000, enterprise: Infinity };
 const toolUsageCounts = {};
@@ -698,6 +700,8 @@ async function executeTool(name, args, tier) {
       patterns_detected: patterns,
       credential_check: credentialCheck,
       analysis_type: 'AI-powered classification -- NOT a simple pattern match',
+      verdict_ttl: VERDICT_TTL.validate_data_safety,
+      data_source_status: 'full',
       source_url: 'api.anthropic.com + ipinfo.io + api.pwnedpasswords.com',
       checked_at: checkedAt,
       _disclaimer: LEGAL_DISCLAIMER
@@ -781,6 +785,8 @@ async function executeTool(name, args, tier) {
           confidence: report.confidence,
           patterns_detected: patterns,
           analysis_type: 'AI-powered compliance remediation -- NOT a simple pattern match',
+          verdict_ttl: VERDICT_TTL.get_safety_report,
+          data_source_status: 'full',
           checked_at: checkedAt,
           _disclaimer: LEGAL_DISCLAIMER
         };
@@ -903,6 +909,8 @@ async function executeTool(name, args, tier) {
         },
         results,
         analysis_type: 'AI-powered batch classification with threat intelligence',
+        verdict_ttl: VERDICT_TTL.get_safety_report,
+        data_source_status: errors.length > 0 ? 'degraded' : 'full',
         checked_at: checkedAt,
         _disclaimer: LEGAL_DISCLAIMER
       };
@@ -931,6 +939,8 @@ async function executeTool(name, args, tier) {
           dataset_description,
           report,
           analysis_type: 'AI-powered compliance audit — NOT legal advice',
+          verdict_ttl: VERDICT_TTL.get_safety_report,
+          data_source_status: 'full',
           checked_at: checkedAt,
           _disclaimer: LEGAL_DISCLAIMER
         };
@@ -962,6 +972,8 @@ async function executeTool(name, args, tier) {
       patterns_detected: patterns,
       sensitivity_level: sensitivityLevel,
       analysis_type: 'Pattern detection only -- no AI analysis. Use validate_data_safety for full AI verdict.',
+      verdict_ttl: VERDICT_TTL.validate_data_safety_lite,
+      data_source_status: 'full',
       checked_at: checkedAt,
       _disclaimer: LEGAL_DISCLAIMER
     };
@@ -1255,6 +1267,7 @@ const server = http.createServer(async (req, res) => {
         freeTierUsage.set(monthKey, Math.max(0, currentCalls - TRIAL_EXTENSION_CALLS));
         trialExtensions.set(emailKey, { name, email, use_case: use_case || '', ip, granted_at: nowISO() });
         saveStats();
+        await redisSet(REDIS_PREFIX + ':trial:' + email.toLowerCase().trim(), { name, email, use_case: use_case || '', ip, timestamp: nowISO(), server: 'data-compliance-mcp' });
         // 24h follow-up record -- processed by /process-trial-followups (fleet cron)
         await redisSet(REDIS_PREFIX + ':followup:' + email.toLowerCase().trim(), { email, name, server: 'data-compliance-mcp', granted_at: nowISO(), sent: false });
         await sendEmail('ojas@kordagencies.com', 'Data Compliance MCP -- Trial Extension: ' + name,
@@ -1417,6 +1430,7 @@ const server = http.createServer(async (req, res) => {
 
           const result = await executeTool(name, toolArgs || {}, access.tier);
           if (access.warning) result._notice = access.warning;
+          result.calls_remaining = access.tier === 'free' ? Math.max(0, access.remaining || 0) : 'unlimited';
 
           response = { jsonrpc: '2.0', id: request.id, result: { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] } };
         } else {
@@ -1473,6 +1487,7 @@ function setupStdio() {
             response = { jsonrpc: '2.0', id: req.id, result: { content: [{ type: 'text', text: JSON.stringify({ error: 'This tool is temporarily unavailable for maintenance.', agent_action: 'RETRY_IN_30_MIN', retryable: true, retry_after_ms: 1800000 }) }] } };
           } else {
             const result = await executeTool(_name, req.params.arguments || {}, 'paid');
+            result.calls_remaining = 'unlimited';
             response = { jsonrpc: '2.0', id: req.id, result: { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] } };
           }
         } catch(e) {