mcp-filter 0.1.0 → 0.3.0

package/README.md

@@ -24,8 +24,8 @@ npx mcp-filter --exclude "playwright*" -- npx @playwright/mcp
 # Include mode: only allow specific tools
 npx mcp-filter --include "browser_navigate" --include "browser_screenshot" -- npx @playwright/mcp
 
-# Combination: include with exceptions
-npx mcp-filter --include "browser_*" --exclude "browser_close" -- npx @playwright/mcp
+# Combination: include with exceptions (order matters!)
+npx mcp-filter --exclude "browser_close" --include "browser_*" -- npx @playwright/mcp
 
 # Multiple patterns
 npx mcp-filter --exclude "playwright*" --exclude "unsafe_*" -- npx @playwright/mcp
@@ -36,12 +36,14 @@ npx mcp-filter --exclude "debug*" -- node my-mcp-server.js
 
 ## Options
 
-- `--exclude <pattern>` - Exclude tools/resources/prompts matching this pattern (like rsync --exclude)
-- `--include <pattern>` - Include ONLY tools/resources/prompts matching this pattern (like rsync --include)
+- `--exclude <pattern>` - Exclude tools/resources/prompts matching this pattern
+- `--include <pattern>` - Include ONLY tools/resources/prompts matching this pattern (whitelist mode)
 - `--` - Separates filter options from upstream server command
 
 Both options can be specified multiple times and combined together.
 
+**Filtering style:** rsync-style evaluation where patterns are evaluated in the order specified, and first match wins.
+
 ## Filtering Modes
 
 ### Exclude Mode (--exclude only)
@@ -64,30 +66,208 @@ npx mcp-filter --include "browser_navigate" --include "browser_screenshot" -- np
 
 ### Combination Mode (--include + --exclude)
 
-Include patterns with exceptions. **Exclude patterns always take precedence** (same as rsync):
+**Rsync-style filtering**: patterns evaluated in order, first match wins.
+
+⚠️ **Common mistake**: Putting `--include` before `--exclude` means the exclude never applies!
 
 ```bash
-# Allow all browser tools EXCEPT close and evaluate
-npx mcp-filter --include "browser_*" --exclude "browser_close" --exclude "browser_evaluate" -- npx @playwright/mcp
+# Example 1: Include first, then exclude (DOES NOT WORK AS EXPECTED!)
+npx mcp-filter --include "browser_*" --exclude "browser_close" -- npx @playwright/mcp
+# Result: All browser_* tools are INCLUDED (browser_* matched first)
+# browser_close is also included because it matches browser_* first
+# The --exclude "browser_close" is never evaluated!
+
+# Example 2: Exclude first, then include (CORRECT way to exclude exceptions!)
+npx mcp-filter --exclude "browser_close" --include "browser_*" -- npx @playwright/mcp
+# Result: browser_close is EXCLUDED (matched exclude first)
+# Other browser_* tools are included
+
+# Example 3: Multiple exclusions, then broad include (recommended pattern)
+npx mcp-filter --exclude "browser_close" --exclude "browser_evaluate" --include "browser_*" -- npx @playwright/mcp
+# Result: browser_close and browser_evaluate excluded (matched first)
+# All other browser_* tools included
 ```
 
-**Precedence Rule:** `--exclude` > `--include` > default allow
-
-When a tool matches both `--include` and `--exclude`, it will be **excluded** (rsync-style behavior).
+**Key principle**: Order matters! The first pattern that matches determines if the item is included or excluded.
 
 ## Pattern Examples
 
+Patterns use glob syntax (via minimatch):
+
 - `playwright*` - Match all items starting with "playwright"
 - `*_admin` - Match all items ending with "\_admin"
 - `test_*_debug` - Match items with pattern in middle
 - `exact_name` - Match exact name
 - `browser_*` - Match all browser-related tools
+- `*` - Match everything
+
+## Rsync-Style Filtering
+
+mcp-filter uses rsync-style pattern evaluation:
+
+1. **Order matters**: Patterns are evaluated in the order you specify them
+2. **First match wins**: Once a pattern matches, that determines the outcome
+3. **Default behavior**:
+   - If no patterns specified: allow everything (passthrough)
+   - If only `--include`: items not matching any include are excluded (whitelist mode)
+   - If only `--exclude`: items not matching any exclude are included
+   - If mixed: items not matching any pattern use whitelist mode if includes exist
+
+**Example workflow**:
+
+```bash
+# Put more specific patterns first
+npx mcp-filter \
+  --exclude "browser_close" \
+  --exclude "browser_evaluate" \
+  --include "browser_*" \
+  -- npx @playwright/mcp
+
+# This works because:
+# 1. browser_close matches --exclude "browser_close" first → excluded
+# 2. browser_evaluate matches --exclude "browser_evaluate" first → excluded
+# 3. browser_navigate matches --include "browser_*" → included
+# 4. other_tool doesn't match any pattern, but --include exists → excluded (whitelist mode)
+```
+
+## Using with Claude Code
+
+### Adding Filtered MCP Servers
+
+Add filtered MCP servers to Claude Code using the `claude mcp add` command:
+
+```bash
+# Basic syntax
+claude mcp add <name> -- npx mcp-filter [filter-options] -- <upstream-command>
+
+# Example: Safe Playwright with read-only browser access
+claude mcp add playwright-safe -- \
+  npx mcp-filter \
+    --include "browser_navigate" \
+    --include "browser_screenshot" \
+    --include "browser_snapshot" \
+    -- npx @playwright/mcp@latest
+
+# Example: Block dangerous operations
+claude mcp add playwright-filtered -- \
+  npx mcp-filter \
+    --exclude "browser_close" \
+    --exclude "browser_evaluate" \
+    -- npx @playwright/mcp@latest
+
+# Example: Include category with exceptions (rsync-style)
+claude mcp add playwright -- \
+  npx mcp-filter \
+    --exclude "browser_close" \
+    --exclude "browser_evaluate" \
+    --include "browser_*" \
+    -- npx @playwright/mcp@latest
+```
+
+**Understanding the command structure:**
+
+- First `--` separates Claude's options from the mcp-filter command
+- Second `--` separates mcp-filter options from the upstream MCP server command
+
+### Scope Options
+
+Choose where to store the configuration:
+
+```bash
+# Local scope (default): Only you, only this project
+claude mcp add playwright-safe -- npx mcp-filter --include "browser_*" -- npx @playwright/mcp@latest
+
+# User scope: Available across all your projects
+claude mcp add --scope user playwright-safe -- \
+  npx mcp-filter --include "browser_*" -- npx @playwright/mcp@latest
+
+# Project scope: Share with team via .mcp.json (checked into git)
+claude mcp add --scope project playwright-safe -- \
+  npx mcp-filter --include "browser_*" -- npx @playwright/mcp@latest
+```
+
+**Security Note**: Claude Code prompts for approval before using project-scoped servers from `.mcp.json` files. To reset approval choices, use `claude mcp reset-project-choices`.
+
+### Managing Filtered Servers
+
+```bash
+# List all configured servers
+claude mcp list
+
+# Get details for a specific server
+claude mcp get playwright-safe
+
+# Remove a server
+claude mcp remove playwright-safe
+
+# Check server status in Claude Code
+/mcp
+```
+
+### Practical Examples
+
+**Monitoring agent (read-only)**
+
+```bash
+claude mcp add browser-monitor -- \
+  npx mcp-filter \
+    --include "browser_navigate" \
+    --include "browser_snapshot" \
+    --include "browser_console_messages" \
+    --include "browser_network_requests" \
+    --include "browser_take_screenshot" \
+    -- npx @playwright/mcp@latest
+```
+
+**Testing agent (no destructive actions)**
+
+```bash
+claude mcp add browser-test -- \
+  npx mcp-filter \
+    --exclude "browser_close" \
+    --exclude "browser_tabs" \
+    --exclude "browser_evaluate" \
+    --include "browser_*" \
+    -- npx @playwright/mcp@latest
+```
+
+Note: Exclude patterns must come BEFORE the include pattern to match first.
+
+**Production debugging (safe operations only)**
+
+```bash
+# Add as user-scoped for use across projects
+claude mcp add --scope user prod-debugger -- \
+  npx mcp-filter \
+    --exclude "browser_click" \
+    --exclude "browser_type" \
+    --exclude "browser_evaluate" \
+    --exclude "browser_fill_form" \
+    --include "browser_*" \
+    -- npx @playwright/mcp@latest
+```
+
+### Updating Server Configuration
+
+To update filter rules, remove and re-add the server:
+
+```bash
+# Remove existing configuration
+claude mcp remove playwright-safe
+
+# Add with new filter rules
+claude mcp add playwright-safe -- \
+  npx mcp-filter \
+    --include "browser_navigate" \
+    --include "browser_screenshot" \
+    -- npx @playwright/mcp@latest
+```
 
 ## Using with Cursor IDE
 
 Add to your `.cursor/mcp.json` or `~/.cursor/mcp.json`:
 
-### Example 1: Exclude dangerous tools
+### Example 1: Exclude specific dangerous tools
 
 ```json
 {
@@ -133,7 +313,7 @@ Add to your `.cursor/mcp.json` or `~/.cursor/mcp.json`:
 }
 ```
 
-### Example 3: Include category with exceptions
+### Example 3: Include category with exceptions (rsync-style)
 
 ```json
 {
@@ -142,10 +322,12 @@ Add to your `.cursor/mcp.json` or `~/.cursor/mcp.json`:
       "command": "npx",
       "args": [
         "mcp-filter",
-        "--include",
-        "browser_*",
         "--exclude",
         "browser_close",
+        "--exclude",
+        "browser_evaluate",
+        "--include",
+        "browser_*",
         "--",
         "npx",
         "@playwright/mcp@latest"
@@ -155,6 +337,8 @@ Add to your `.cursor/mcp.json` or `~/.cursor/mcp.json`:
 }
 ```
 
+Note: Exclude patterns come first to match before the broader include pattern.
+
 After adding the configuration, restart Cursor completely to apply the changes.
 
 ## How It Works
@@ -180,7 +364,7 @@ pnpm run build
 pnpm test
 
 # Test locally
-./dist/index.js --disable "playwright*" -- npx tsx test-server.ts
+./dist/index.js --exclude "playwright*" -- npx tsx test-server.ts
 ```
 
 ## Links

package/dist/cli.d.ts

@@ -1,6 +1,9 @@
+export interface FilterPattern {
+    type: "include" | "exclude";
+    pattern: string;
+}
 export interface FilterConfig {
-    excludePatterns: string[];
-    includePatterns: string[];
+    patterns: FilterPattern[];
     upstreamCommand: string[];
 }
 export declare function parseArgs(args: string[]): FilterConfig;

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,YAAY;IAC3B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,YAAY,CAoDtD"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,SAAS,GAAG,SAAS,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,YAAY,CAkDtD"}

package/dist/cli.js

@@ -1,6 +1,5 @@
 export function parseArgs(args) {
-    const excludePatterns = [];
-    const includePatterns = [];
+    const patterns = [];
     const upstreamCommand = [];
     let inUpstreamCommand = false;
     for (let i = 0; i < args.length; i++) {
@@ -18,7 +17,7 @@ export function parseArgs(args) {
             if (!pattern) {
                 throw new Error("--exclude requires a pattern argument");
             }
-            excludePatterns.push(pattern);
+            patterns.push({ type: "exclude", pattern });
             continue;
         }
         if (arg === "--include") {
@@ -26,7 +25,7 @@ export function parseArgs(args) {
             if (!pattern) {
                 throw new Error("--include requires a pattern argument");
             }
-            includePatterns.push(pattern);
+            patterns.push({ type: "include", pattern });
             continue;
         }
         throw new Error(`Unknown argument: ${arg}`);
@@ -35,8 +34,7 @@ export function parseArgs(args) {
         throw new Error("No upstream command specified. Use -- to separate filter args from upstream command");
     }
     return {
-        excludePatterns,
-        includePatterns,
+        patterns,
         upstreamCommand,
     };
 }

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,MAAM,eAAe,GAAa,EAAE,CAAC;IAErC,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAE9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAEpB,IAAI,iBAAiB,EAAE,CAAC;YACtB,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1B,SAAS;QACX,CAAC;QAED,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,iBAAiB,GAAG,IAAI,CAAC;YACzB,SAAS;QACX,CAAC;QAED,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D,CAAC;YACD,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9B,SAAS;QACX,CAAC;QAED,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D,CAAC;YACD,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9B,SAAS;QACX,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,qFAAqF,CACtF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,eAAe;QACf,eAAe;QACf,eAAe;KAChB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAUA,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,eAAe,GAAa,EAAE,CAAC;IAErC,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAE9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAEpB,IAAI,iBAAiB,EAAE,CAAC;YACtB,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1B,SAAS;QACX,CAAC;QAED,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,iBAAiB,GAAG,IAAI,CAAC;YACzB,SAAS;QACX,CAAC;QAED,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;YAC5C,SAAS;QACX,CAAC;QAED,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;YAC5C,SAAS;QACX,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,qFAAqF,CACtF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ;QACR,eAAe;KAChB,CAAC;AACJ,CAAC"}

package/dist/filter.d.ts

@@ -1,7 +1,8 @@
+import { FilterPattern } from "./cli.js";
 export declare class Filter {
-    private excludePatterns;
-    private includePatterns;
-    constructor(excludePatterns: string[], includePatterns?: string[]);
+    private patterns;
+    private hasIncludePatterns;
+    constructor(patterns: FilterPattern[]);
     shouldExclude(name: string): boolean;
     filterList<T extends {
         name: string;

package/dist/filter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"filter.d.ts","sourceRoot":"","sources":["../src/filter.ts"],"names":[],"mappings":"AAEA,qBAAa,MAAM;IAEf,OAAO,CAAC,eAAe;IACvB,OAAO,CAAC,eAAe;gBADf,eAAe,EAAE,MAAM,EAAE,EACzB,eAAe,GAAE,MAAM,EAAO;IAGxC,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAmBpC,UAAU,CAAC,CAAC,SAAS;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE;CAGxD"}
+{"version":3,"file":"filter.d.ts","sourceRoot":"","sources":["../src/filter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,qBAAa,MAAM;IAGL,OAAO,CAAC,QAAQ;IAF5B,OAAO,CAAC,kBAAkB,CAAU;gBAEhB,QAAQ,EAAE,aAAa,EAAE;IAI7C,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAepC,UAAU,CAAC,CAAC,SAAS;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE;CAGxD"}

package/dist/filter.js

@@ -1,24 +1,23 @@
 import { minimatch } from "minimatch";
 export class Filter {
-    excludePatterns;
-    includePatterns;
-    constructor(excludePatterns, includePatterns = []) {
-        this.excludePatterns = excludePatterns;
-        this.includePatterns = includePatterns;
+    patterns;
+    hasIncludePatterns;
+    constructor(patterns) {
+        this.patterns = patterns;
+        this.hasIncludePatterns = patterns.some((p) => p.type === "include");
     }
     shouldExclude(name) {
-        // Step 1: Check include patterns (if specified)
-        if (this.includePatterns.length > 0) {
-            const isIncluded = this.includePatterns.some((pattern) => minimatch(name, pattern));
-            if (!isIncluded)
-                return true; // Not included = excluded
+        // Evaluate patterns in order - first match wins (rsync-style)
+        for (const pattern of this.patterns) {
+            if (minimatch(name, pattern.pattern)) {
+                // First pattern that matches determines the outcome
+                return pattern.type === "exclude";
+            }
         }
-        // Step 2: Check exclude patterns (explicit exclude always wins)
-        const isExcluded = this.excludePatterns.some((pattern) => minimatch(name, pattern));
-        if (isExcluded)
-            return true;
-        // Step 3: Default allow
-        return false;
+        // No pattern matched - determine default behavior
+        // If there are include patterns, default is exclude (whitelist mode)
+        // Otherwise, default is include (allow all)
+        return this.hasIncludePatterns;
     }
     filterList(items) {
         return items.filter((item) => !this.shouldExclude(item.name));

package/dist/filter.js.map

@@ -1 +1 @@
-{"version":3,"file":"filter.js","sourceRoot":"","sources":["../src/filter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,OAAO,MAAM;IAEP;IACA;IAFV,YACU,eAAyB,EACzB,kBAA4B,EAAE;QAD9B,oBAAe,GAAf,eAAe,CAAU;QACzB,oBAAe,GAAf,eAAe,CAAe;IACrC,CAAC;IAEJ,aAAa,CAAC,IAAY;QACxB,gDAAgD;QAChD,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CACvD,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CACzB,CAAC;YACF,IAAI,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAC,CAAC,0BAA0B;QAC1D,CAAC;QAED,gEAAgE;QAChE,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CACvD,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CACzB,CAAC;QACF,IAAI,UAAU;YAAE,OAAO,IAAI,CAAC;QAE5B,wBAAwB;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,UAAU,CAA6B,KAAU;QAC/C,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,CAAC;CACF"}
+{"version":3,"file":"filter.js","sourceRoot":"","sources":["../src/filter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,MAAM,OAAO,MAAM;IAGG;IAFZ,kBAAkB,CAAU;IAEpC,YAAoB,QAAyB;QAAzB,aAAQ,GAAR,QAAQ,CAAiB;QAC3C,IAAI,CAAC,kBAAkB,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IACvE,CAAC;IAED,aAAa,CAAC,IAAY;QACxB,8DAA8D;QAC9D,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrC,oDAAoD;gBACpD,OAAO,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC;YACpC,CAAC;QACH,CAAC;QAED,kDAAkD;QAClD,qEAAqE;QACrE,4CAA4C;QAC5C,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAED,UAAU,CAA6B,KAAU;QAC/C,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,CAAC;CACF"}

package/dist/index.js

@@ -21,20 +21,21 @@ async function main() {
         console.error('  mcp-filter --include "browser_*" --exclude "browser_close" -- npx @playwright/mcp');
         process.exit(1);
     }
-    console.error(`Starting MCP filter with ${config.excludePatterns.length + config.includePatterns.length} pattern(s)`);
-    config.excludePatterns.forEach((p) => console.error(`  Exclude: ${p}`));
-    config.includePatterns.forEach((p) => console.error(`  Include: ${p}`));
-    if (config.includePatterns.length > 0 && config.excludePatterns.length > 0) {
-        console.error("Warning: Using both --include and --exclude. Exclude patterns take precedence.");
+    console.error(`Starting MCP filter with ${config.patterns.length} pattern(s)`);
+    config.patterns.forEach((p) => console.error(`  ${p.type === "include" ? "Include" : "Exclude"}: ${p.pattern}`));
+    const hasInclude = config.patterns.some((p) => p.type === "include");
+    const hasExclude = config.patterns.some((p) => p.type === "exclude");
+    if (hasInclude && hasExclude) {
+        console.error("Note: Using rsync-style filtering - patterns evaluated in order, first match wins.");
     }
     // Spawn upstream server
     const upstreamProcess = spawnUpstream(config.upstreamCommand);
     // Create filter
-    const filter = new Filter(config.excludePatterns, config.includePatterns);
+    const filter = new Filter(config.patterns);
     // Create proxy server
     const proxy = new ProxyServer({
         name: "mcp-filter",
-        version: "0.1.0",
+        version: "0.2.0",
     }, filter);
     // Connect client to upstream server via subprocess stdio
     const clientTransport = new StdioClientTransport({

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,KAAK,EAAkC,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,KAAK,UAAU,IAAI;IACjB,+BAA+B;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEnC,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,UAAW,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,KAAK,CACX,qGAAqG,CACtG,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3B,OAAO,CAAC,KAAK,CACX,6DAA6D,CAC9D,CAAC;QACF,OAAO,CAAC,KAAK,CACX,iGAAiG,CAClG,CAAC;QACF,OAAO,CAAC,KAAK,CACX,qFAAqF,CACtF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,KAAK,CACX,4BACE,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC,MACzD,aAAa,CACd,CAAC;IACF,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;IACxE,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;IAExE,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3E,OAAO,CAAC,KAAK,CACX,gFAAgF,CACjF,CAAC;IACJ,CAAC;IAED,wBAAwB;IACxB,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAE9D,gBAAgB;IAChB,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IAE1E,sBAAsB;IACtB,MAAM,KAAK,GAAG,IAAI,WAAW,CAC3B;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,OAAO;KACjB,EACD,MAAM,CACP,CAAC;IAEF,yDAAyD;IACzD,MAAM,eAAe,GAAG,IAAI,oBAAoB,CAAC;QAC/C,OAAO,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;QAClC,IAAI,EAAE,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;QACrC,MAAM,EAAE,MAAM;KACf,CAAC,CAAC;IAEH,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACjD,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAE9C,0EAA0E;IAC1E,MAAM,eAAe,GAAG,IAAI,oBAAoB,EAAE,CAAC;IACnD,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACjD,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAExC,iBAAiB;IACjB,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAClC,eAAe,CAAC,IAAI,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,aAAa,CAAC,OAAiB;IACtC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC;IAE/B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;QAC5B,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;KAChC,CAAC,CAAC;IAEH,+BAA+B;IAC/B,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACzB,OAAO,CAAC,KAAK,CAAC,oCAAoC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QACvB,OAAO,CAAC,KAAK,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,KAAK,EAAkC,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,KAAK,UAAU,IAAI;IACjB,+BAA+B;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEnC,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,UAAW,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,KAAK,CACX,qGAAqG,CACtG,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3B,OAAO,CAAC,KAAK,CACX,6DAA6D,CAC9D,CAAC;QACF,OAAO,CAAC,KAAK,CACX,iGAAiG,CAClG,CAAC;QACF,OAAO,CAAC,KAAK,CACX,qFAAqF,CACtF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,KAAK,CACX,4BAA4B,MAAM,CAAC,QAAQ,CAAC,MAAM,aAAa,CAChE,CAAC;IACF,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5B,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,OAAO,EAAE,CAClE,CACF,CAAC;IAEF,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IAErE,IAAI,UAAU,IAAI,UAAU,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CACX,oFAAoF,CACrF,CAAC;IACJ,CAAC;IAED,wBAAwB;IACxB,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAE9D,gBAAgB;IAChB,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAE3C,sBAAsB;IACtB,MAAM,KAAK,GAAG,IAAI,WAAW,CAC3B;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,OAAO;KACjB,EACD,MAAM,CACP,CAAC;IAEF,yDAAyD;IACzD,MAAM,eAAe,GAAG,IAAI,oBAAoB,CAAC;QAC/C,OAAO,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;QAClC,IAAI,EAAE,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;QACrC,MAAM,EAAE,MAAM;KACf,CAAC,CAAC;IAEH,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACjD,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAE9C,0EAA0E;IAC1E,MAAM,eAAe,GAAG,IAAI,oBAAoB,EAAE,CAAC;IACnD,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACjD,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAExC,iBAAiB;IACjB,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAClC,eAAe,CAAC,IAAI,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,aAAa,CAAC,OAAiB;IACtC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC;IAE/B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;QAC5B,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;KAChC,CAAC,CAAC;IAEH,+BAA+B;IAC/B,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACzB,OAAO,CAAC,KAAK,CAAC,oCAAoC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QACvB,OAAO,CAAC,KAAK,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-filter",
-  "version": "0.1.0",
+  "version": "0.3.0",
   "description": "MCP server proxy to filter tools, resources, and prompts from upstream MCP servers",
   "type": "module",
   "bin": {