mcp-server-mcpindex 0.3.1 → 0.3.3

package/CHANGELOG.md

@@ -4,6 +4,19 @@ All notable changes to `mcp-server-mcpindex` are recorded here.
 
 The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and the project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.3.3] - 2026-06-08
+
+### Changed
+
+- **Recommended install now rides `@latest`.** The docs wire `npx -y mcp-server-mcpindex@latest` so the host fetches the newest discovery server on each restart — no manual upgrade step. This server is the *advisory* recommender (`recommend_mcp_for_task` / `check_tool_trust` / `assess_server`), **not** the in-path drift gate, so it carries no version pin (the gate, `mcpindex-preflight`, stays pinned + notify-only on purpose). The startup update notice already prints the exact `npm i -g …@latest` command for anyone who pins.
+
+## [0.3.2] - 2026-06-08
+
+### Changed
+
+- **Update notice is now stderr-only.** Removed the MCP `notifications/message` (`sendLoggingMessage`) from the update-notice path — it was redundant with the stderr line and hosts render it inconsistently (Cursor logged it as a bare ` undefined`). stderr is the universal channel every host (Cursor, Claude Desktop, Claude Code, Gemini CLI) surfaces in its per-server log, so nothing a host actually displayed is lost. Supersedes the 0.3.0 dual-channel behavior.
+- The `logging` server capability is **no longer declared** (it existed only to deliver that notification); the server now advertises `tools` only.
+
 ## [0.3.1] - 2026-06-08
 
 ### Changed

package/README.md

@@ -19,12 +19,16 @@ Add to `~/Library/Application Support/Claude/claude_desktop_config.json`:
   "mcpServers": {
     "mcpindex": {
       "command": "npx",
-      "args": ["-y", "mcp-server-mcpindex"]
+      "args": ["-y", "mcp-server-mcpindex@latest"]
     }
   }
 }
 ```
 
+> `@latest` keeps you current: this is the advisory discovery server (not the in-path drift
+> gate), so it carries no version pin — `npx` fetches the newest on your next host restart, no
+> manual upgrade step.
+
 Restart Claude Desktop. Then ask:
 
 > "Find me an MCP server that can read PDFs and write the contents to S3."
@@ -40,7 +44,7 @@ Add to `.cursor/mcp.json`:
   "mcpServers": {
     "mcpindex": {
       "command": "npx",
-      "args": ["-y", "mcp-server-mcpindex"]
+      "args": ["-y", "mcp-server-mcpindex@latest"]
     }
   }
 }
@@ -51,7 +55,7 @@ Add to `.cursor/mcp.json`:
 Add to your Cline settings:
 
 ```bash
-npx -y mcp-server-mcpindex
+npx -y mcp-server-mcpindex@latest
 ```
 
 ## Tools exposed
@@ -112,7 +116,7 @@ import { StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js'
 
 const mcpindex = new Client({ name: 'gate', version: '1.0.0' }, { capabilities: {} });
 await mcpindex.connect(new StdioClientTransport({
-  command: 'npx', args: ['-y', 'mcp-server-mcpindex'],
+  command: 'npx', args: ['-y', 'mcp-server-mcpindex@latest'],
 }));
 
 // gateToolCall wraps any agent tool dispatch. Plug it in front of

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-server-mcpindex",
-  "version": "0.3.1",
+  "version": "0.3.3",
   "description": "An MCP server for finding MCP servers, plus advisory trust verdicts (check_tool_trust, assess_server) for agent frameworks. Drop-in for Claude Desktop, Cursor, Cline, Zed.",
   "keywords": [
     "mcp",

package/src/index.mjs

@@ -19,9 +19,10 @@ const PKG_VERSION = createRequire(import.meta.url)('../package.json').version;
 
 const server = new Server(
   { name: 'mcp-server-mcpindex', version: PKG_VERSION },
-  // `logging` lets us push the update notice as an MCP notifications/message the
-  // host may render to the user; `sendLoggingMessage` no-ops without it.
-  { capabilities: { tools: {}, logging: {} } },
+  // Tools only. We do NOT advertise `logging`: the update notice goes to stderr (which
+  // every host surfaces), not via `notifications/message` (rendered inconsistently — Cursor
+  // logs it as a bare ` undefined`). stderr is the universal, clean channel.
+  { capabilities: { tools: {} } },
 );
 
 const TOOLS = [
@@ -291,7 +292,7 @@ const transport = new StdioServerTransport();
 await server.connect(transport);
 console.error('[mcp-server-mcpindex] connected via stdio');
 
-// Fire-and-forget: tell the user if a newer version exists (stderr + best-effort
-// MCP notification). Dropped onto the event loop AFTER connect so it can never
+// Fire-and-forget: tell the user if a newer version exists (stderr only — the channel
+// every host renders cleanly). Dropped onto the event loop AFTER connect so it can never
 // delay or crash startup; all errors are swallowed inside.
-notifyUpdateIfAvailable({ currentVersion: PKG_VERSION, server }).catch(() => {});
+notifyUpdateIfAvailable({ currentVersion: PKG_VERSION }).catch(() => {});

package/src/update-check.mjs

@@ -87,14 +87,15 @@ export async function fetchLatestVersion({
   }
 }
 
-/** Orchestration: check, and if a newer version exists, emit on BOTH channels.
- *  stderr is the reliable channel; the MCP logging notification is best-effort
- *  (only delivered if the host enabled `logging` and didn't filter `info`).
- *  Returns the message it emitted (or null) — handy for tests/callers.
- *  Never throws; never blocks the caller meaningfully (caller fire-and-forgets). */
+/** Orchestration: check, and if a newer version exists, emit the notice to STDERR only.
+ *  stderr is the UNIVERSAL channel — every MCP host (Cursor, Claude Desktop/Code, Gemini
+ *  CLI, …) surfaces a spawned server's stderr in its per-server log. We deliberately do NOT
+ *  emit an MCP `notifications/message`: hosts render it inconsistently (Cursor logs it as a
+ *  bare ` undefined`, swallowing the text), so it only adds noise where stderr already
+ *  carries the message cleanly. Returns the message it emitted (or null) — handy for
+ *  tests/callers. Never throws; never blocks the caller (caller fire-and-forgets). */
 export async function notifyUpdateIfAvailable({
   currentVersion,
-  server = null,
   env = process.env,
   log = (m) => console.error(`[mcp-server-mcpindex] ${m}`),
   fetchImpl = fetch,
@@ -105,14 +106,7 @@ export async function notifyUpdateIfAvailable({
     const latest = await fetchLatestVersion({ pkg, fetchImpl });
     if (!latest || !isOlder(currentVersion, latest)) return null;
     const msg = formatUpdateMessage(currentVersion, latest);
-    log(msg); // stderr — reliable
-    if (server && typeof server.sendLoggingMessage === 'function') {
-      try {
-        await server.sendLoggingMessage({ level: 'info', logger: 'mcpindex', data: msg });
-      } catch {
-        /* host didn't enable logging / filtered the level — stderr already covered it */
-      }
-    }
+    log(msg); // stderr — the one channel every host renders cleanly
     return msg;
   } catch {
     return null; // belt-and-suspenders: this path must never surface an error