mcp-proof 0.3.11 → 0.3.13

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md ADDED
@@ -0,0 +1,9 @@
1
+ # Changelog
2
+
3
+ ## 0.3.13
4
+
5
+ Scanner-only release. Runtime authorization functionality is not included.
6
+
7
+ The package contains MCP tool-poisoning, hidden Unicode, typosquat, transport,
8
+ runtime tools/call, Claude Skill, client-config, SARIF, Trust Card, payload-size,
9
+ and live stdio scanning capabilities.
package/bin/mcp-proof.js CHANGED
@@ -150,8 +150,9 @@ async function main() {
150
150
 
151
151
  if (args.inspectCall) {
152
152
  let result;
153
+ let call;
153
154
  try {
154
- result = runExecute(args);
155
+ ({ result } = runExecute(args));
155
156
  } catch (err) {
156
157
  process.stderr.write(`mcp-proof: ${err.message}\n`);
157
158
  process.exit(err.exitCode || 65);
@@ -654,7 +655,7 @@ function runExecute(args) {
654
655
  const result = evaluateCall(parsed);
655
656
  result.mode = 'inspect-call';
656
657
  result.name = args.file || 'stdin';
657
- return result;
658
+ return { result };
658
659
  }
659
660
 
660
661
  function exitCodeForDecision(d) {
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "mcp-proof",
3
- "version": "0.3.11",
3
+ "version": "0.3.13",
4
4
  "description": "Auditable, privacy-preserving MCP (Model Context Protocol) server verifier with local Trust Cards and SARIF output — test servers before connecting them to an AI system.",
5
5
  "main": "engine.js",
6
6
  "bin": {
@@ -10,6 +10,7 @@
10
10
  "engine.js",
11
11
  "bin/mcp-proof.js",
12
12
  "README.md",
13
+ "CHANGELOG.md",
13
14
  "LICENSE"
14
15
  ],
15
16
  "engines": {