kitsune-mcp 0.8.5 → 0.10.0

package/README.md

@@ -5,7 +5,9 @@
   <p><strong>One MCP entry. 10,000+ servers on demand.<br/>Load only the tools you need. Switch instantly. No restarts.</strong></p>
 </div>
 
-[![PyPI](https://img.shields.io/pypi/v/kitsune-mcp?color=blue)](https://pypi.org/project/kitsune-mcp/)
+[![PyPI](https://img.shields.io/pypi/v/kitsune-mcp?color=blue&label=pypi)](https://pypi.org/project/kitsune-mcp/)
+[![npm](https://img.shields.io/npm/v/kitsune-mcp?color=cb3837&label=npm&logo=npm)](https://www.npmjs.com/package/kitsune-mcp)
+[![MCP Registry](https://img.shields.io/badge/MCP%20Registry-listed-8a2be2)](https://registry.modelcontextprotocol.io/v0/servers?search=io.github.kaiser-data%2Fkitsune-mcp)
 [![Python](https://img.shields.io/pypi/pyversions/kitsune-mcp)](https://pypi.org/project/kitsune-mcp/)
 [![CI](https://github.com/kaiser-data/kitsune-mcp/actions/workflows/test.yml/badge.svg)](https://github.com/kaiser-data/kitsune-mcp/actions)
 [![Coverage](https://codecov.io/gh/kaiser-data/kitsune-mcp/branch/main/graph/badge.svg)](https://codecov.io/gh/kaiser-data/kitsune-mcp)
@@ -15,6 +17,22 @@
 
 ---
 
+## What's new in v0.9.0
+
+Friction-reduction release focused on first-run onboarding, credential visibility, and agent workflows.
+
+- **`search()` shows credential status per result** — `✅ ready` or `✗ needs BRAVE_API_KEY` inline, so you know before you shapeshift
+- **`shapeshift(server_id, source="local", confirm=True)`** — force a local `npx`/`uvx` install without a Smithery key; `source="smithery"` forces HTTP; `source="official"` requires a verified registry listing
+- **`shiftback(uninstall=True)`** — optionally removes the locally installed package (uvx fully removed via `uv tool uninstall`; npx cache clears automatically)
+- **`KITSUNE_TRUST=community`** env var — skip the `confirm=True` gate permanently for trusted users and agents; set once via `key("KITSUNE_TRUST", "community")`
+- **First-run onboarding in `status()`** — clean sessions now show a 5-step getting-started guide with an example flow
+- **Lean-mounting hint** — after a heavy `shapeshift()` the output suggests `tools=[...]` with a concrete tool name and token cost
+- **Registry failure reporting** — `search()` now shows `⚠️ Skipped: <name> (timeout)` when one registry is slow, so you know results are partial instead of silently incomplete
+
+See [CHANGELOG.md](CHANGELOG.md) for the full list plus internal refactors and bug fixes.
+
+---
+
 ## Why Kitsune?
 
 In Japanese folklore, the Kitsune (狐) is a fox spirit of extraordinary intelligence and magical power. What makes it remarkable is how it grows: with age and wisdom, a Kitsune gains additional tails — each one representing a new ability it has mastered. It can shapeshift, take on any form it chooses, borrow the powers of others, and just as freely cast them off when the purpose is fulfilled. One fox. Many forms. Total fluidity.
@@ -263,6 +281,8 @@ Every `shapeshift()`, `call()`, and `connect()` result shows where the server co
 | Medium | `mcpregistry`, `glama`, `smithery` | `✓ Source: smithery` |
 | Community | `npm`, `pypi`, `github` | `⚠️ Source: npm (community — not verified)` |
 
+Community servers and `source="local"` installs require `confirm=True` — you're explicitly acknowledging you've reviewed the server before running arbitrary code. To bypass this for servers you already trust, set `KITSUNE_TRUST=community` (via `key("KITSUNE_TRUST", "community")` or your `.env`). This persists across sessions so power users and agents never see the gate again.
+
 ### Install command validation
 
 Before spawning any subprocess, Kitsune MCP validates the executable name:
@@ -400,8 +420,8 @@ key("BRAVE_API_KEY", "your-key")   # writes to .env, active immediately
 
 | Tool | Description |
 |---|---|
-| `shapeshift(server_id, tools)` | Load a server's tools live. `tools=[...]` for lean shapeshift. |
-| `shiftback(kill)` | Remove shapeshifted tools. `kill=True` terminates the process immediately. |
+| `shapeshift(server_id, tools, source, confirm)` | Load a server's tools live. `tools=[...]` for lean load. `source="local"` forces npx/uvx install; `source="smithery"` forces HTTP. |
+| `shiftback(kill, uninstall)` | Remove shapeshifted tools. `kill=True` terminates the process. `uninstall=True` also removes a locally installed package. |
 | `search(query, registry)` | Search MCP servers across registries. |
 | `inspect(server_id)` | Show tools, schemas, and live credential status (✓/✗ per key). |
 | `call(tool_name, server_id, args)` | Call a tool. `server_id` optional when shapeshifted — current form used. |
@@ -492,6 +512,16 @@ call("brave_web_search", arguments={"query": "MCP protocol 2025"})
 shiftback()
 ```
 
+### Local install — no API key needed
+
+```
+# Force local install via npx/uvx — no Smithery key required
+shapeshift("brave", source="local", confirm=True)
+# → spawns npx locally, tools appear natively
+call("brave_web_search", arguments={"query": "MCP 2026"})
+shiftback(uninstall=True)   # remove tools AND uninstall the package
+```
+
 ### Persistent server with setup guidance
 
 ```
@@ -509,13 +539,17 @@ shiftback(kill=True)                    # terminates process, frees RAM
 ## Installation
 
 ```bash
-pip install kitsune-mcp        # from PyPI
+uvx kitsune-mcp                # recommended — uv manages the env automatically
+# or
+pip install kitsune-mcp        # classic pip
 # or
-git clone https://github.com/kaiser-data/kitsune-mcp && pip install -e .
+npx kitsune-mcp                # if you prefer npm (delegates to uvx internally)
 ```
 
 **Requirements:** Python 3.12+ · `node`/`npx` (for npm servers) · `uvx` from [uv](https://github.com/astral-sh/uv) (for pip servers)
 
+> **Tip:** `uvx kitsune-mcp` is the easiest way — uv installs into an isolated env automatically. No venv setup needed.
+
 ---
 
 ## Contributing

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kitsune-mcp",
-  "version": "0.8.5",
+  "version": "0.10.0",
   "description": "The shape-shifting MCP hub — shapeshift() into 10,000+ MCP servers at runtime. One entry point, no restarts, 7 registries.",
   "mcpName": "io.github.kaiser-data/kitsune-mcp",
   "bin": {