drupal-mcp-connector 2.4.0 → 2.4.1

package/CHANGELOG.md

@@ -7,6 +7,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.4.1] - 2026-08-14
+
+### Fixed
+- **One unresolvable site no longer kills tool discovery (#187).** 2.4.0's
+  discovery gate resolved every configured site eagerly, so a deliberately
+  credential-less site — the inert break-glass tier keeps its Keychain item
+  absent by design — threw `requireSecureAuth` during `tools/list` and took
+  the whole tool surface down. Discovery now skips sites whose resolution
+  throws; execution against such a site still surfaces its own descriptive
+  error at call time, exactly as in 2.3.0.
+
 ## [2.4.0] - 2026-08-14
 
 ### Added

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "drupal-mcp-connector",
-  "version": "2.4.0",
+  "version": "2.4.1",
   "description": "A secure, multi-site Model Context Protocol (MCP) connector for Drupal — dual-protocol JSON:API and GraphQL.",
   "type": "module",
   "main": "src/index.js",

package/src/index.js

@@ -31,12 +31,12 @@ import { createMcpHandler } from "@modelcontextprotocol/server";
 import { serveStdio } from "@modelcontextprotocol/server/stdio";
 import { toNodeHandler } from "@modelcontextprotocol/node";
 
-import { getSiteConfig, listSiteNames, getTlsConfig, CLIENT_VERSION } from "./lib/config.js";
+import { listSiteNames, getTlsConfig, CLIENT_VERSION } from "./lib/config.js";
 import { makeBearerCheck } from "./lib/http-auth.js";
 import { createLegacySessionHandler, createMcpRequestHandler } from "./lib/http-handler.js";
 import { createConnectorServerFactory } from "./lib/mcp-server.js";
 import { createRateLimiter } from "./lib/rate-limit.js";
-import { callTool } from "./lib/dispatch.js";
+import { callTool, listResolvableSiteConfigs } from "./lib/dispatch.js";
 import { filterDiscoverableTools } from "./lib/governance.js";
 
 // Tools — aggregated (single source of truth, side-effect-free) and per-tool prompts
@@ -236,7 +236,7 @@ const buildConnectorServer = createConnectorServerFactory({
   serverInfo: { name: "drupal-mcp-connector", version: CLIENT_VERSION },
   tools: {
     definitions: allDefinitions,
-    list: () => filterDiscoverableTools(allDefinitions, listSiteNames().map((n) => getSiteConfig(n))),
+    list: () => filterDiscoverableTools(allDefinitions, listResolvableSiteConfigs()),
     call: callTool,
   },
   resources: { definitions: RESOURCES, read: readResource },

package/src/lib/dispatch.js

@@ -8,7 +8,7 @@
  * this module is denial on every path, with no ungoverned fallback below it.
  */
 
-import { getSiteConfig } from "./config.js";
+import { getSiteConfig, listSiteNames } from "./config.js";
 import { resolveSecurityConfig, assertNotReadOnly,
   assertDestructiveAllowed, assertGraphqlMutationAllowed,
   SecurityError } from "./security.js";
@@ -18,6 +18,26 @@ import { inferOperation } from "./operations.js";
 import { assertSourceGovernance, GovernanceError, GOVERNANCE_DIAGNOSTIC_TOOLS } from "./governance.js";
 import { allHandlers } from "../tools/index.js";
 
+/**
+ * Resolve every configured site that CAN resolve, skipping the ones that
+ * throw. A site can legitimately be unresolvable on purpose — the break-glass
+ * tier keeps its credential absent to stay inert — and discovery must treat
+ * such a site as simply unable to serve tools, never let it kill tools/list
+ * for everyone (the 2.4.0 regression). Execution against an unresolvable
+ * site still surfaces its own descriptive error at call time.
+ *
+ * @returns {Array<object>} Resolved site configs.
+ */
+export function listResolvableSiteConfigs() {
+  return listSiteNames().flatMap((name) => {
+    try {
+      return [getSiteConfig(name)];
+    } catch {
+      return [];
+    }
+  });
+}
+
 /**
  * Derive the entity type a tool acts on, for destructive-allow assertions.
  *