protect-mcp 0.5.3 → 0.5.4

package/README.md

@@ -16,6 +16,14 @@ npx protect-mcp serve
 
 Open Claude Code in the same project. Every tool call is now intercepted, evaluated, and signed.
 
+To also connect to the ScopeBlind dashboard in one step:
+
+```bash
+npx protect-mcp quickstart --connect
+```
+
+Creates a free ScopeBlind dashboard and configures receipt upload automatically. No signup required. Free up to 20,000 receipts/month.
+
 ### What `init-hooks` creates
 
 | File | Purpose |
@@ -209,6 +217,7 @@ Commands:
   serve             Start HTTP hook server for Claude Code (port 9377)
   init-hooks        Generate Claude Code hook config + skill + sample Cedar policy
   quickstart        Zero-config onboarding: init + demo + show receipts
+  connect           Link to ScopeBlind dashboard (creates sandbox if needed)
   init              Generate Ed25519 keypair + config template
   demo              Start a demo server wrapped with protect-mcp
   doctor            Check your setup: keys, policies, verifier, connectivity
@@ -246,6 +255,19 @@ npx protect-mcp bundle --output audit.json
 
 Self-contained offline-verifiable bundle with receipts + signing keys. Verify with `npx @veritasacta/verify`.
 
+## Dashboard
+
+protect-mcp works fully offline. Optionally connect to the ScopeBlind dashboard for:
+
+- Real-time receipt visualization
+- Abuse alerts and anomaly detection
+- Compliance export and audit bundles
+- Usage analytics
+
+Free tier: 20,000 receipts/month. No credit card required.
+
+[scopeblind.com/pricing](https://scopeblind.com/pricing)
+
 ## Standards & IP
 
 - **IETF Internet-Draft**: [draft-farley-acta-signed-receipts-01](https://datatracker.ietf.org/doc/draft-farley-acta-signed-receipts/) — Signed Decision Receipts for Machine-to-Machine Access Control
@@ -253,6 +275,17 @@ Self-contained offline-verifiable bundle with receipts + signing keys. Verify wi
 - **Verification**: Apache-2.0 — `npx @veritasacta/verify --self-test`
 - **Microsoft AGT Integration**: [PR #667](https://github.com/microsoft/agent-governance-toolkit/pull/667) — Cedar policy bridge for Agent Governance Toolkit
 
+## What's New in v0.5.3
+
+- `quickstart --connect`: Auto-create dashboard sandbox and configure receipt upload
+- `connect` subcommand: Link an existing setup to the ScopeBlind dashboard
+- Anonymous install telemetry (opt-out: `PROTECT_MCP_TELEMETRY=off`)
+- Improved Cedar WASM detection
+
+## Examples
+
+See complete working examples at [github.com/ScopeBlind/examples](https://github.com/ScopeBlind/examples).
+
 ## License
 
 MIT — free to use, modify, distribute, and build upon without restriction.

package/dist/{chunk-HFM6K7E4.mjs → chunk-FAELTNS7.mjs}

@@ -700,7 +700,7 @@ async function startHookServer(options = {}) {
 `);
     process.stderr.write(`[PROTECT_MCP] \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510
 `);
-    process.stderr.write(`[PROTECT_MCP] \u2502  protect-mcp Hook Server v0.5.0                \u2502
+    process.stderr.write(`[PROTECT_MCP] \u2502  protect-mcp Hook Server v0.5.3                \u2502
 `);
     process.stderr.write(`[PROTECT_MCP] \u251C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524
 `);

package/dist/{chunk-SU2FZH7U.mjs → chunk-J6L4XCTE.mjs}

@@ -35049,7 +35049,7 @@ function handleRequest(request) {
       id: request.id,
       result: {
         protocolVersion: "2024-11-05",
-        serverInfo: { name: "protect-mcp-demo", version: "0.2.0" },
+        serverInfo: { name: "protect-mcp-demo", version: "0.5.3" },
         capabilities: { tools: {} }
       }
     });

package/dist/cli.js

@@ -5451,7 +5451,7 @@ async function startHookServer(options = {}) {
 `);
     process.stderr.write(`[PROTECT_MCP] \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510
 `);
-    process.stderr.write(`[PROTECT_MCP] \u2502  protect-mcp Hook Server v0.5.0                \u2502
+    process.stderr.write(`[PROTECT_MCP] \u2502  protect-mcp Hook Server v0.5.3                \u2502
 `);
     process.stderr.write(`[PROTECT_MCP] \u251C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524
 `);

package/dist/demo-server.js

@@ -35073,7 +35073,7 @@ function handleRequest(request) {
       id: request.id,
       result: {
         protocolVersion: "2024-11-05",
-        serverInfo: { name: "protect-mcp-demo", version: "0.2.0" },
+        serverInfo: { name: "protect-mcp-demo", version: "0.5.3" },
         capabilities: { tools: {} }
       }
     });

package/dist/demo-server.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   createSandboxServer
-} from "./chunk-SU2FZH7U.mjs";
+} from "./chunk-J6L4XCTE.mjs";
 import "./chunk-PQJP2ZCI.mjs";
 export {
   createSandboxServer

package/dist/hook-server.js

@@ -1101,7 +1101,7 @@ async function startHookServer(options = {}) {
 `);
     process.stderr.write(`[PROTECT_MCP] \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510
 `);
-    process.stderr.write(`[PROTECT_MCP] \u2502  protect-mcp Hook Server v0.5.0                \u2502
+    process.stderr.write(`[PROTECT_MCP] \u2502  protect-mcp Hook Server v0.5.3                \u2502
 `);
     process.stderr.write(`[PROTECT_MCP] \u251C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524
 `);

package/dist/hook-server.mjs

@@ -1,6 +1,6 @@
 import {
   startHookServer
-} from "./chunk-HFM6K7E4.mjs";
+} from "./chunk-FAELTNS7.mjs";
 import "./chunk-YTBC72JJ.mjs";
 import "./chunk-PQJP2ZCI.mjs";
 export {

package/dist/index.d.mts

@@ -2289,7 +2289,7 @@ declare function createAttestationField(attestation: EvidenceAttestation): {
  *   // Create a C2PA manifest from an Acta receipt chain
  *   const manifest = createC2PAManifest(receipts, {
  *     title: 'AI-generated report',
- *     generator: 'protect-mcp v0.3.3',
+ *     generator: 'protect-mcp v0.5.3',
  *   });
  *
  *   // The manifest can be embedded in images, PDFs, or documents

package/dist/index.d.ts

@@ -2289,7 +2289,7 @@ declare function createAttestationField(attestation: EvidenceAttestation): {
  *   // Create a C2PA manifest from an Acta receipt chain
  *   const manifest = createC2PAManifest(receipts, {
  *     title: 'AI-generated report',
- *     generator: 'protect-mcp v0.3.3',
+ *     generator: 'protect-mcp v0.5.3',
  *   });
  *
  *   // The manifest can be embedded in images, PDFs, or documents

package/dist/index.js

@@ -37966,7 +37966,7 @@ async function startHookServer(options = {}) {
 `);
     process.stderr.write(`[PROTECT_MCP] \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510
 `);
-    process.stderr.write(`[PROTECT_MCP] \u2502  protect-mcp Hook Server v0.5.0                \u2502
+    process.stderr.write(`[PROTECT_MCP] \u2502  protect-mcp Hook Server v0.5.3                \u2502
 `);
     process.stderr.write(`[PROTECT_MCP] \u251C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524
 `);
@@ -39961,7 +39961,7 @@ function handleRequest(request) {
       id: request.id,
       result: {
         protocolVersion: "2024-11-05",
-        serverInfo: { name: "protect-mcp-demo", version: "0.2.0" },
+        serverInfo: { name: "protect-mcp-demo", version: "0.5.3" },
         capabilities: { tools: {} }
       }
     });

package/dist/index.mjs

@@ -21,7 +21,7 @@ import {
 } from "./chunk-BYYWYSHM.mjs";
 import {
   createSandboxServer
-} from "./chunk-SU2FZH7U.mjs";
+} from "./chunk-J6L4XCTE.mjs";
 import {
   BUILTIN_PATTERNS,
   generateHookSettings,
@@ -30,7 +30,7 @@ import {
 } from "./chunk-NMZPXXL3.mjs";
 import {
   startHookServer
-} from "./chunk-HFM6K7E4.mjs";
+} from "./chunk-FAELTNS7.mjs";
 import {
   checkRateLimit,
   evaluateCedar,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "protect-mcp",
-  "version": "0.5.3",
-  "mcpName": "io.github.tomjwxf/protect-mcp",
+  "version": "0.5.4",
+  "mcpName": "com.scopeblind/protect-mcp",
   "description": "Enterprise security gateway for MCP servers and Claude Code hooks. Cedar policies, Ed25519-signed receipts, swarm tracking, and tamper detection. Shadow or enforce mode.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",