mcp-authz 0.2.0 → 0.3.0

package/README.md

@@ -254,6 +254,11 @@ provider-specific assurance claim, or explicitly set `requireEmailVerified:
 false` only when the issuer contract guarantees the email another way. For
 opaque tokens, pass any SDK-compatible `tokenVerifier` plus `identityFromAuth`.
 
+An agent that signs in as itself, with an OAuth client-credentials token,
+carries a `sub` and no email. Set `verifier.requireEmail: false` to accept it,
+and name its `sub` in a rule to grant it roles. Email and domain rules never
+match it and `allowedDomain` refuses it, but a rule with no `match` admits it.
+
 ### `definePolicy(spec)`
 
 ```ts

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import { _ as Identity, a as PermissionCatalog, c as PolicySpec, d as createPrincipal, f as definePermissions, g as DenialReason, h as AccessDeniedError, i as MatchedRule, l as Principal, m as reconcile, n as Explanation, o as PermissionOf, p as definePolicy, r as Match, s as Policy, u as Rule } from "./policy-DuZbwrKf.js";
 import { a as AuditDeliveryFailure, c as AuditSink, d as PromptConfig, f as ResourceConfig, h as authz, i as ApprovalSink, l as Capability, m as ToolConfig, n as ApprovalRefusedError, o as AuditErrorSink, p as ServerOptions, r as ApprovalRequest, s as AuditEvent, t as ApprovalDecision, u as Definition } from "./tools-BQE1O-7P.js";
-import { a as AuthorizationDecisionSink, i as AuthorizationDecisionEvent, n as identityFromAuth, r as jwksVerifier, t as VerifierOptions } from "./verifier-rQlS6rYR.js";
+import { a as AuthorizationDecisionSink, i as AuthorizationDecisionEvent, n as identityFromAuth, r as jwksVerifier, t as VerifierOptions } from "./verifier-DF6gUMQ6.js";
 import { a as scopesForCapability, i as decodeMcpNameHeader, n as ScopeRequirement, o as scopesFromMcpHeaders, r as ToolScopeMap, s as TrustedMcpRoute, t as CapabilityScopeMap } from "./ladder-D18eJ7tD.js";
 import { AuthInfo, McpServer, OAuthMetadata, OAuthTokenVerifier } from "@modelcontextprotocol/server";
 //#region src/discovery.d.ts

package/dist/index.js

@@ -1,5 +1,5 @@
-import { a as policyDenied, i as emitDecision, n as jwksVerifier, o as principalLabel, r as verifierFor, s as AccessDeniedError, t as identityFromAuth } from "./verifier-BruW4XGR.js";
-import { d as scopesForCapability, f as scopesFromMcpHeaders, i as runScopedGate, r as permissionForRoute, u as decodeMcpNameHeader } from "./ladder-BhG1S7nd.js";
+import { a as policyDenied, i as emitDecision, n as jwksVerifier, o as principalLabel, r as verifierFor, s as AccessDeniedError, t as identityFromAuth } from "./verifier-D6VIAYuT.js";
+import { d as scopesForCapability, f as scopesFromMcpHeaders, i as runScopedGate, r as permissionForRoute, u as decodeMcpNameHeader } from "./ladder-CUzOKudC.js";
 import { i as reconcile, n as definePermissions, r as definePolicy, t as createPrincipal } from "./policy-BBp3Jq6G.js";
 import { McpServer, UriTemplate, createMcpHandler, getOAuthProtectedResourceMetadataUrl, oauthMetadataResponse, requireBearerAuth } from "@modelcontextprotocol/server";
 //#region src/discovery.ts

package/dist/{ladder-BhG1S7nd.js → ladder-CUzOKudC.js}

@@ -1,4 +1,4 @@
-import { a as policyDenied, i as emitDecision, o as principalLabel, s as AccessDeniedError } from "./verifier-BruW4XGR.js";
+import { a as policyDenied, i as emitDecision, o as principalLabel, s as AccessDeniedError } from "./verifier-D6VIAYuT.js";
 import { OAuthError, OAuthErrorCode, bearerAuthChallengeResponse, classifyInboundRequest, isJsonContentType } from "@modelcontextprotocol/server";
 //#region src/scopes.ts
 const BASE64_SENTINEL = /^=\?base64\?([A-Za-z0-9+/]*(?:={0,2}))\?=$/;

package/dist/openapi.d.ts

@@ -1,6 +1,6 @@
 import { _ as Identity, l as Principal, s as Policy } from "./policy-DuZbwrKf.js";
 import { c as AuditSink, o as AuditErrorSink } from "./tools-BQE1O-7P.js";
-import { a as AuthorizationDecisionSink, t as VerifierOptions } from "./verifier-rQlS6rYR.js";
+import { a as AuthorizationDecisionSink, t as VerifierOptions } from "./verifier-DF6gUMQ6.js";
 import { t as PermissionMapRecord } from "./permissions-module-DxCHuE-N.js";
 import { AuthInfo, OAuthMetadata, OAuthTokenVerifier } from "@modelcontextprotocol/server";
 //#region src/openapi.d.ts

package/dist/openapi.js

@@ -1,4 +1,4 @@
-import { a as policyDenied, i as emitDecision, o as principalLabel, r as verifierFor, s as AccessDeniedError } from "./verifier-BruW4XGR.js";
+import { a as policyDenied, i as emitDecision, o as principalLabel, r as verifierFor, s as AccessDeniedError } from "./verifier-D6VIAYuT.js";
 import { i as reconcile } from "./policy-BBp3Jq6G.js";
 import { getOAuthProtectedResourceMetadataUrl, oauthMetadataResponse, requireBearerAuth } from "@modelcontextprotocol/server";
 //#region src/openapi.ts

package/dist/proxy.d.ts

@@ -1,5 +1,5 @@
 import { _ as Identity, s as Policy } from "./policy-DuZbwrKf.js";
-import { a as AuthorizationDecisionSink, t as VerifierOptions } from "./verifier-rQlS6rYR.js";
+import { a as AuthorizationDecisionSink, t as VerifierOptions } from "./verifier-DF6gUMQ6.js";
 import { t as CapabilityScopeMap } from "./ladder-D18eJ7tD.js";
 import { AuthInfo, OAuthMetadata, OAuthTokenVerifier } from "@modelcontextprotocol/server";
 //#region src/upstream.d.ts

package/dist/proxy.js

@@ -1,5 +1,5 @@
-import { a as policyDenied, i as emitDecision, n as jwksVerifier, o as principalLabel, s as AccessDeniedError, t as identityFromAuth } from "./verifier-BruW4XGR.js";
-import { a as forwardToUpstream, c as isJsonResponse, d as scopesForCapability, i as runScopedGate, l as readCappedBody, n as permissionForFlatMap, o as headersForRewrittenBody, s as isEventStream, t as capabilityLabel } from "./ladder-BhG1S7nd.js";
+import { a as policyDenied, i as emitDecision, n as jwksVerifier, o as principalLabel, s as AccessDeniedError, t as identityFromAuth } from "./verifier-D6VIAYuT.js";
+import { a as forwardToUpstream, c as isJsonResponse, d as scopesForCapability, i as runScopedGate, l as readCappedBody, n as permissionForFlatMap, o as headersForRewrittenBody, s as isEventStream, t as capabilityLabel } from "./ladder-CUzOKudC.js";
 import { i as reconcile } from "./policy-BBp3Jq6G.js";
 import { UriTemplate, getOAuthProtectedResourceMetadataUrl, oauthMetadataResponse, requireBearerAuth } from "@modelcontextprotocol/server";
 import { err, isUnexpectedError, ok, run } from "awaitly";

package/dist/{verifier-BruW4XGR.js → verifier-D6VIAYuT.js}

@@ -69,9 +69,10 @@ function jwksVerifier(options) {
 				throw invalidToken(`Token rejected: ${error instanceof Error ? error.message : String(error)}`);
 			}
 			if (typeof payload.exp !== "number") throw invalidToken("Token has no `exp` claim.");
-			const email = payload[emailClaim];
-			if (typeof email !== "string" || !email) throw invalidToken(`Token carries no '${emailClaim}' claim, so there is no identity to map.`);
-			if ((options.requireEmailVerified ?? true) && payload[emailVerifiedClaim] !== true) throw invalidToken(`Token does not prove '${emailClaim}' with '${emailVerifiedClaim}: true'.`);
+			const claimed = payload[emailClaim];
+			const email = typeof claimed === "string" && claimed ? claimed : void 0;
+			if (!email && (options.requireEmail ?? true)) throw invalidToken(`Token carries no '${emailClaim}' claim, so there is no identity to map.`);
+			if (email && (options.requireEmailVerified ?? true) && payload[emailVerifiedClaim] !== true) throw invalidToken(`Token does not prove '${emailClaim}' with '${emailVerifiedClaim}: true'.`);
 			const sub = payload.sub;
 			if (typeof sub !== "string" || !sub) throw invalidToken("Token has no `sub` claim, so there is no stable subject to bind to.");
 			const domain = typeof payload.hd === "string" ? payload.hd : void 0;
@@ -86,7 +87,7 @@ function jwksVerifier(options) {
 					issuer: options.issuer,
 					sub,
 					email,
-					emailVerified: options.requireEmailVerified === false || payload[emailVerifiedClaim] === true,
+					emailVerified: email !== void 0 && (options.requireEmailVerified === false || payload[emailVerifiedClaim] === true),
 					domain,
 					claims: payload
 				}

package/dist/{verifier-rQlS6rYR.d.ts → verifier-DF6gUMQ6.d.ts}

@@ -62,6 +62,14 @@ type VerifierOptions = {
   emailVerifiedClaim?: string;
   /** Require an explicit `true` verified-email claim. Defaults to true. */
   requireEmailVerified?: boolean;
+  /**
+   * Require an email in every token. Defaults to true. Set false to accept an
+   * agent that signs in as itself, such as an OAuth client-credentials token:
+   * its identity is its `sub`, which a policy rule names. Email and domain
+   * rules never match it, and neither does `allowedDomain`; a rule with no
+   * `match` does. A token that does carry an email is checked as before.
+   */
+  requireEmail?: boolean;
 };
 /**
  * A JWKS-backed verifier. Keys are fetched once and cached by `jose`, which

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-authz",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Authorization for MCP servers: OAuth 2.1 resource server, roles/permissions policy, permission-gated tools (2026-07-28)",
   "repository": {
     "type": "git",