opedd-mcp 0.6.10 → 0.6.11
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.js +10 -4
- package/package.json +1 -1
package/dist/index.js
CHANGED
|
@@ -828,7 +828,6 @@ export async function dispatchTool(name, args, creds = ENV_CREDS) {
|
|
|
828
828
|
}
|
|
829
829
|
const { since, cursor, limit = 50 } = args;
|
|
830
830
|
const params = new URLSearchParams({
|
|
831
|
-
access_key: creds.accessKey,
|
|
832
831
|
format: "json",
|
|
833
832
|
limit: String(Math.min(Number(limit) || 50, 200)),
|
|
834
833
|
});
|
|
@@ -836,7 +835,11 @@ export async function dispatchTool(name, args, creds = ENV_CREDS) {
|
|
|
836
835
|
params.set("since", since);
|
|
837
836
|
if (cursor)
|
|
838
837
|
params.set("cursor", cursor);
|
|
839
|
-
|
|
838
|
+
// Security 2026-07-27: enterprise key travels in a header, not the
|
|
839
|
+
// query string (query strings are logged verbatim by proxies/edge).
|
|
840
|
+
const data = await opeddFetch(creds, `/enterprise-license?${params.toString()}`, {
|
|
841
|
+
headers: { "X-Enterprise-Key": creds.accessKey },
|
|
842
|
+
});
|
|
840
843
|
return ok(data);
|
|
841
844
|
}
|
|
842
845
|
// ── stream_feed_ndjson (Phase 11 M3) ───────────────────────────────────
|
|
@@ -846,7 +849,6 @@ export async function dispatchTool(name, args, creds = ENV_CREDS) {
|
|
|
846
849
|
}
|
|
847
850
|
const { since, cursor, limit = 200 } = args;
|
|
848
851
|
const params = new URLSearchParams({
|
|
849
|
-
access_key: creds.accessKey,
|
|
850
852
|
format: "ndjson",
|
|
851
853
|
limit: String(Math.min(Number(limit) || 200, 1000)),
|
|
852
854
|
});
|
|
@@ -854,7 +856,11 @@ export async function dispatchTool(name, args, creds = ENV_CREDS) {
|
|
|
854
856
|
params.set("since", since);
|
|
855
857
|
if (cursor)
|
|
856
858
|
params.set("cursor", cursor);
|
|
857
|
-
|
|
859
|
+
// Security 2026-07-27: enterprise key travels in a header, not the
|
|
860
|
+
// query string (query strings are logged verbatim by proxies/edge).
|
|
861
|
+
const data = await opeddFetchNdjson(creds, `/enterprise-license?${params.toString()}`, {
|
|
862
|
+
headers: { "X-Enterprise-Key": creds.accessKey },
|
|
863
|
+
});
|
|
858
864
|
return ok(data);
|
|
859
865
|
}
|
|
860
866
|
// ── get_audit_events (Phase 9.x + 10 M5 attestation) ───────────────────
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "opedd-mcp",
|
|
3
|
-
"version": "0.6.
|
|
3
|
+
"version": "0.6.11",
|
|
4
4
|
"description": "Licensed, rights-cleared content for AI agents — verifiable license keys, on-chain proof, and EU AI Act attestation. The MCP alternative to unlicensed scraping for RAG and AI search.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "dist/index.js",
|