mcp-proof 0.3.10 → 0.3.11

package/README.md

@@ -29,7 +29,7 @@ npx mcp-proof --config ~/.config/Claude/claude_desktop_config.json
 npx mcp-proof --skill ~/.claude/skills/example/SKILL.md
 
 # Inspect an exact tools/call payload before execution
-cat call.json | npx mcp-proof --execute --json
+cat call.json | npx mcp-proof --inspect-call --json
 
 # Create a shareable Trust Card for a PR or README
 npx mcp-proof tools.json --markdown > MCP_TRUST.md
@@ -134,7 +134,8 @@ Options:
   --stdio <cmd>      launch a real stdio MCP server, call tools/list, scan returned tools
   --config <path>    scan every stdio server in an MCP client config with mcpServers
   --skill <path>     scan a Claude SKILL.md (educational/warning context aware)
-  --execute [<path>] inspect a tools/call payload before execution
+  --inspect-call [<path>] inspect a tools/call payload before execution
+  --execute [<path>] deprecated alias for --inspect-call
   --markdown         emit a shareable Markdown Trust Card
   --trust-card       alias for --markdown
   --sarif            emit SARIF 2.1.0 for GitHub code scanning
@@ -226,7 +227,7 @@ The npm CLI is local-first: MCP manifests, tool descriptions, tool arguments, cl
 - **Publisher verification is lexical only by default.** npm scope match + Levenshtein typosquat. Pass `--live` to confirm npm packages against `registry.npmjs.org` with one network call. *No GitHub-API lookup, no signature verification.*
 - **No source-tree scan.** The full VyriAI gateway also runs a static scanner over the package source for `child_process`, postinstall scripts, obfuscation. That step needs the source unpacked locally and isn't shipped in this CLI.
 - **No dependency CVE check.** The full gateway wraps `npm audit`; this CLI doesn't shell out.
-- **Limited runtime-payload inspection.** `--execute` scans a supplied `tools/call` name and arguments before execution; it does not execute the call, enforce an authorization policy, verify identity, or observe server runtime behavior.
+- **Limited runtime-payload inspection.** `--inspect-call` scans a supplied `tools/call` name and arguments before execution (`--execute` remains a deprecated alias); it does not execute the call, enforce an authorization policy, verify identity, or observe server runtime behavior.
 - **Stdio discovery only.** `--stdio` / `--config` launches local stdio MCP servers and calls `tools/list`. It does not yet connect to HTTP/SSE MCP servers.
 - **Skill context is keyword-based.** The skill detector looks for warning/example/demonstration framing around sensitive signals. A well-disguised attack without that framing may not downgrade.
 - **Local payload cap.** The CLI refuses inputs over 5 MB by default to avoid accidental memory blowups in CI. Override with `MCP_SCAN_MAX_BYTES=20mb` if you have an unusually large tools manifest.

package/bin/mcp-proof.js

@@ -43,15 +43,16 @@ Usage:
   mcp-proof --stdio "<command to launch MCP server>"
   mcp-proof --config <claude-or-cursor-config.json>
   mcp-proof --skill <SKILL.md>
-  mcp-proof --execute [<call.json>]        runtime authorization of a tools/call payload
+  mcp-proof --inspect-call [<call.json>]  inspect a tools/call payload before execution
 
-  If <file.json> is omitted and --stdio/--config/--skill/--execute are not used, JSON is read from stdin.
+  If <file.json> is omitted and --stdio/--config/--skill/--inspect-call are not used, JSON is read from stdin.
 
 Options:
   --stdio <cmd>      launch a real stdio MCP server, call tools/list, scan returned tools
   --config <path>    scan every stdio server in an MCP client config with mcpServers
   --skill <path>     scan a Claude SKILL.md (educational/warning context aware)
-  --execute [<path>] inspect a tools/call payload before execution (reads stdin if path omitted)
+  --inspect-call [<path>] inspect a tools/call payload before execution (reads stdin if path omitted)
+  --execute [<path>] deprecated alias for --inspect-call
   --markdown         emit a shareable Markdown Trust Card
   --trust-card       alias for --markdown
   --sarif            emit SARIF 2.1.0 for GitHub code scanning
@@ -94,9 +95,12 @@ async function main() {
   if (args.selfTest) {
     return runSelfTest(args);
   }
-  const exclusiveModes = [args.stdio, args.config, args.skill, args.execute].filter(Boolean).length;
+  if (args.deprecatedExecute) {
+    process.stderr.write('mcp-proof: --execute is deprecated; use --inspect-call instead.\n');
+  }
+  const exclusiveModes = [args.stdio, args.config, args.skill, args.inspectCall].filter(Boolean).length;
   if (exclusiveModes > 1) {
-    process.stderr.write('mcp-proof: use one of --stdio, --config, --skill, --execute at a time.\n');
+    process.stderr.write('mcp-proof: use one of --stdio, --config, --skill, --inspect-call at a time.\n');
     process.exit(64);
   }
 
@@ -144,7 +148,7 @@ async function main() {
     process.exit(exitCodeForDecision(result.decision));
   }
 
-  if (args.execute) {
+  if (args.inspectCall) {
     let result;
     try {
       result = runExecute(args);
@@ -207,7 +211,7 @@ function parseArgs(argv) {
   const out = {
     source: '', transport: '', bind: '', json: false, selfTest: false,
     help: false, version: false, file: '', stdio: '', config: '', skill: '',
-    execute: false, format: 'human', live: false, timeoutMs: DEFAULT_TIMEOUT_MS,
+    inspectCall: false, deprecatedExecute: false, format: 'human', live: false, timeoutMs: DEFAULT_TIMEOUT_MS,
   };
   for (let i = 0; i < argv.length; i++) {
     const a = argv[i];
@@ -224,8 +228,13 @@ function parseArgs(argv) {
       case '--stdio': out.stdio = argv[++i] || ''; break;
       case '--config': out.config = expandHome(argv[++i] || ''); break;
       case '--skill': out.skill = expandHome(argv[++i] || ''); break;
+      case '--inspect-call':
+        out.inspectCall = true;
+        if (argv[i + 1] && !argv[i + 1].startsWith('-')) out.file = argv[++i];
+        break;
       case '--execute':
-        out.execute = true;
+        out.inspectCall = true;
+        out.deprecatedExecute = true;
         if (argv[i + 1] && !argv[i + 1].startsWith('-')) out.file = argv[++i];
         break;
       case '--live': out.live = true; break;
@@ -643,7 +652,7 @@ function runExecute(args) {
     throw e;
   }
   const result = evaluateCall(parsed);
-  result.mode = 'execute';
+  result.mode = 'inspect-call';
   result.name = args.file || 'stdin';
   return result;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-proof",
-  "version": "0.3.10",
+  "version": "0.3.11",
   "description": "Auditable, privacy-preserving MCP (Model Context Protocol) server verifier with local Trust Cards and SARIF output — test servers before connecting them to an AI system.",
   "main": "engine.js",
   "bin": {