funifier-mcp 0.3.16 → 0.3.18

package/.cursor/rules/funifier.mdc

@@ -60,6 +60,7 @@ Then read a result with `funifier_read_doc path=<path>`.
 | `skills/funifier/references/import-csv.md` | Import or export Funifier platform data via CSV — bulk player import, performance export, and cross-system data migration; use when loading or extracting large datasets, not for individual record CRUD or media file uploads (use funifier-upload-file) |
 | `skills/funifier/references/upload-file.md` | Upload files to Funifier — images and documents for player avatars, challenge resources, and visual assets; use when adding media to the platform, not for CSV data import (use funifier-import-csv) or static frontend hosting (use funifier-implement-frontend) |
 | `skills/funifier/references/manage-indexes.md` | Create, list, and drop MongoDB single-field indexes on Funifier collections via the REST API. Composite (multi-field) indexes are NOT supported by this endpoint — see Limitation section. |
+| `skills/funifier/references/audit-permissions.md` | Cross-check a project's Funifier API calls against the live security document — scan code for usage, build an evidence-backed manifest, run the deterministic audit engine, and report missing scopes, excess tokens, and static danger findings; use when debugging 401s, auditing minimum privilege, or verifying permissions before deploying; audit is read-only and never changes any configuration |
 
 Full workflow files: `skills/funifier/references/`
 

package/.github/copilot-instructions.md

@@ -53,6 +53,7 @@ Detailed guided workflows live in `skills/funifier/references/`:
 | `skills/funifier/references/import-csv.md` | Import or export Funifier platform data via CSV — bulk player import, performance export, and cross-system data migration; use when loading or extracting large datasets, not for individual record CRUD or media file uploads (use funifier-upload-file) |
 | `skills/funifier/references/upload-file.md` | Upload files to Funifier — images and documents for player avatars, challenge resources, and visual assets; use when adding media to the platform, not for CSV data import (use funifier-import-csv) or static frontend hosting (use funifier-implement-frontend) |
 | `skills/funifier/references/manage-indexes.md` | Create, list, and drop MongoDB single-field indexes on Funifier collections via the REST API. Composite (multi-field) indexes are NOT supported by this endpoint — see Limitation section. |
+| `skills/funifier/references/audit-permissions.md` | Cross-check a project's Funifier API calls against the live security document — scan code for usage, build an evidence-backed manifest, run the deterministic audit engine, and report missing scopes, excess tokens, and static danger findings; use when debugging 401s, auditing minimum privilege, or verifying permissions before deploying; audit is read-only and never changes any configuration |
 
 ### Funifier Modules
 

package/AGENTS.md

@@ -92,6 +92,7 @@ Before any `funifier_*` MCP tool call or Funifier task, find the matching row an
 | `skills/funifier/references/import-csv.md` | Import or export Funifier platform data via CSV — bulk player import, performance export, and cross-system data migration; use when loading or extracting large datasets, not for individual record CRUD or media file uploads (use funifier-upload-file) |
 | `skills/funifier/references/upload-file.md` | Upload files to Funifier — images and documents for player avatars, challenge resources, and visual assets; use when adding media to the platform, not for CSV data import (use funifier-import-csv) or static frontend hosting (use funifier-implement-frontend) |
 | `skills/funifier/references/manage-indexes.md` | Create, list, and drop MongoDB single-field indexes on Funifier collections via the REST API. Composite (multi-field) indexes are NOT supported by this endpoint — see Limitation section. |
+| `skills/funifier/references/audit-permissions.md` | Cross-check a project's Funifier API calls against the live security document — scan code for usage, build an evidence-backed manifest, run the deterministic audit engine, and report missing scopes, excess tokens, and static danger findings; use when debugging 401s, auditing minimum privilege, or verifying permissions before deploying; audit is read-only and never changes any configuration |
 
 ## Funifier Modules
 

package/datasource-funifier-docs/.coverage.json

@@ -1,5 +1,5 @@
 {
-  "generatedAt": "2026-06-11T23:15:00.000Z",
+  "generatedAt": "2026-06-12T16:15:00.000Z",
   "docsRoot": "datasource-funifier-docs/",
   "docs": {
     "knowledge/guides/aggregates.md": {
@@ -40,6 +40,12 @@
         "funifier-create-scheduler"
       ]
     },
+    "knowledge/guides/permission-audit.md": {
+      "status": "covered",
+      "skillIds": [
+        "funifier-audit-permissions"
+      ]
+    },
     "knowledge/guides/trigger-examples.md": {
       "status": "grouped",
       "skillIds": [
@@ -249,9 +255,10 @@
       ]
     },
     "knowledge/modules/security.md": {
-      "status": "covered",
+      "status": "grouped",
       "skillIds": [
-        "funifier-configure-security"
+        "funifier-configure-security",
+        "funifier-audit-permissions"
       ]
     },
     "knowledge/modules/staging.md": {
@@ -328,9 +335,9 @@
     }
   },
   "summary": {
-    "total": 51,
+    "total": 52,
     "covered": 32,
-    "grouped": 13,
+    "grouped": 14,
     "deferred": 6,
     "uncovered": 0
   }