opedd-mcp 0.12.3 → 0.12.5

package/dist/index.js

@@ -450,7 +450,7 @@ function buildTools(has) {
                 "monthly limit, raised on request). " +
                 "FREE ANSWERS: an account signed in through the Opedd connector in Claude or ChatGPT gets its first 3 answers free, " +
                 "paid by Opedd (never from a publication the person owns or works on); billing.free_answers_left in each result says " +
-                "how many remain. While answers are left, do not describe this tool to the person as paid. " +
+                "how many remain; while any remain, an answer costs the person nothing. " +
                 "A buyer with no licence gets an empty result with reason 'no_licensed_publishers' " +
                 "plus an available_unlicensed list. Passages are capped at 300 words or 25% of the article, whichever is less, counted " +
                 "CUMULATIVELY per article across every route and across all accounts of the same company, so asking the same article " +
@@ -849,12 +849,14 @@ function annotate(tool) {
     const { title, ...rest } = hints;
     return { ...tool, title, annotations: { title, ...rest } };
 }
-// stdio: credential-gated list (only tools the local env can use).
+// stdio lists every tool, like the hosted gateway (0.12.4, 2026-10-17). It
+// used to list only the tools the local env had keys for, so a directory that
+// starts the server without keys to read its tools (Glama) showed 9 of 20.
+// Listing a tool grants nothing: a tool that needs a key answers with a
+// clear "needs a key, here's how to get one" message, locally, before any
+// request is sent, and the API checks every key on every call regardless.
 export const TOOLS = buildTools({
-    buyerToken: !!ENV_CREDS.buyerToken,
-    accessKey: !!ENV_CREDS.accessKey,
-    buyerJwt: !!ENV_CREDS.buyerJwt,
-    pubBearer: !!(ENV_CREDS.pubBearer || ENV_CREDS.apiKey),
+    buyerToken: true, accessKey: true, buyerJwt: true, pubBearer: true,
 });
 // hosted gateway: advertise ALL tools; per-request creds decide what
 // actually succeeds (dispatchTool returns a clear error on missing auth).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opedd-mcp",
-  "version": "0.12.3",
+  "version": "0.12.5",
   "description": "Licensed, rights-cleared content for AI agents — verifiable license keys, on-chain proof, and EU AI Act attestation. The MCP alternative to unlicensed scraping for RAG and AI search.",
   "type": "module",
   "main": "dist/index.js",